Lucene search
+L

9066 matches found

ATTACKERKB
ATTACKERKB
added 2021/09/17 7:15 a.m.5 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.7AI score0.0055EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/09/17 6:15 a.m.29 views

CVE-2021-3812 Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.6AI score0.0055EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.8 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.7 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
NVD
NVD
added 2021/09/15 12:15 p.m.21 views

CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.6CVSS0.00899EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/15 12:15 p.m.16 views

CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.7AI score
SaveExploits0References2
OSV
OSV
added 2021/09/15 12:15 p.m.15 views

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/15 12:15 p.m.6 views

CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.6CVSS6.8AI score0.00899EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/09/15 12:15 p.m.5 views

CVE-2021-3785

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.8AI score0.00721EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/09/15 12:15 p.m.4 views

CVE-2021-3783

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.6CVSS6.6AI score0.00696EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/15 12:0 a.m.9 views

YOURLS 跨站脚本漏洞

YOURLS is a PHP-based short linking platform. YOURLS versions prior to 1.8.2 are vulnerable to a cross-site scripting vulnerability that originates when the program does not properly validate user input during page generation. An attacker could use this vulnerability to launch a cross-site...

8.8CVSS5.2AI score0.00721EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/15 12:0 a.m.8 views

YOURLS 跨站脚本漏洞

YOURLS is an open source PHP-based short link platform. yourls suffers from a cross-site scripting vulnerability that arises from the program's susceptibility to incorrect input and cross-site scripting during page generation...

6.6CVSS6.2AI score0.00696EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.6 views

btcpay server 跨站脚本漏洞

btcpay server is a free and open source bitcoin payment processor that allows you to accept bitcoins without fees or intermediaries. The btcpay server suffers from a cross-site scripting vulnerability that arises from the vulnerability to incorrect neutralization of input during web page generati...

6.1CVSS5.1AI score0.0077EPSS
SaveExploits1References3
Fortinet
Fortinet
added 2021/09/07 12:0 a.m.41 views

Protect

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiOS may allow a remote unauthenticated attacker to either redirect users to malicious websites via a crafted "Host" header or to execute JavaScript code in the victim's browser context...

6.8AI score0.00356EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/06 12:15 p.m.6 views

CVE-2021-3768

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6AI score0.0058EPSS
SaveExploits1References3
CVE
CVE
added 2021/09/06 11:17 a.m.57 views

CVE-2021-3768

CVE-2021-3768 affects BookStack and stems from Improper Neutralization of Input During Web Page Generation, enabling stored Cross-Site Scripting (XSS). The vulnerability affects input handling in bookstack app/book pages and can lead to leakage of administrator cookies and other impacts as descri...

5.4CVSS5.4AI score0.0058EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/06 11:17 a.m.23 views

CVE-2021-3767 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.8AI score0.0058EPSS
SaveExploits1References2
NVD
NVD
added 2021/08/19 12:15 a.m.14 views

CVE-2021-32602

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform ...

6.1CVSS0.00632EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/19 12:15 a.m.14 views

Design/Logic Flaw

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform ...

4.3CVSS6.1AI score0.00632EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/08/18 11:40 p.m.64 views

CVE-2021-32602

CVE-2021-32602 is an XSS vulnerability in FortiPortal GUI (versions 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below) caused by improper neutralization of input during web page generation (CWE-79). A remote, una...

6.1CVSS6AI score0.00632EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder