22 matches found
SUSE CVE-2026-23451
In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bondheaderparse bondheaderparse can loop if a stack of two bonding devices is setup, because skb-dev always points to the hierarchy top. Add new "const struct netdevice dev" parameter t...
Inventory Management System Cross-site Scripting Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload into the Ad...
CVE-2023-39708: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...
LavaLite Stored Cross-site Scripting vulnerability
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New parameter...
Cross site scripting
A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36397
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36396
A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2020-36395
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
PT-2021-12038
Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue exists in the /admin/roles/role component, allowing authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...
CVE-2020-36395: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/contact/contact component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the...
PT-2021-12039
Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue in the "/admin/contact/contact" API endpoint allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...
LavaLite 跨站脚本漏洞
Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/roles/role component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the ""New"...
CVE-2020-36396: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
PT-2021-12037
Name of the Vulnerable Software and Affected Versions: LavaLite version 5.8.0 Description: A stored cross site scripting XSS issue exists in the /admin/user/team component, allowing authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New...
CVE-2020-36397: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...
CVE-2017-9621
Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...
CVE-2017-9621: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...
PT-2017-19080
Name of the Vulnerable Software and Affected Versions EPESI versions 1.8.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the original or new parameter in the update translation.php file. This can be exploited by sending malicious input to the...
PT-2014-4913
Name of the Vulnerable Software and Affected Versions F-Secure Messaging Secure Gateway version 7.5.0 before Patch 1862 Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to...