Lucene search
+L

9213 matches found

ATTACKERKB
ATTACKERKB
added 2021/12/14 3:15 p.m.8 views

CVE-2021-4107

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS5.9AI score0.00782EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/14 11:15 a.m.21 views

CVE-2021-3831

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.1CVSS0.01812EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/14 11:15 a.m.35 views

Cross site scripting

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.2AI score0.01812EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/14 10:50 a.m.36 views

CVE-2021-3831 Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.1CVSS6.5AI score0.01812EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/14 12:00 a.m.10 views

YetiForceCrm 跨站脚本漏洞

YetiForceCrm is an open source Crm system from the Polish company YetiForce. Yetiforcecrm suffers from a cross-site scripting vulnerability that originates from the susceptibility to incorrect input during web page generation...

6.1CVSS5.4AI score0.00782EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/10 12:15 p.m.8 views

CVE-2021-4084

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.4CVSS6.8AI score0.0156EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/10 12:15 p.m.26 views

CVE-2021-4084

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.4CVSS0.0156EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/10 11:15 a.m.12 views

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS5.9AI score0.00755EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/10 11:15 a.m.20 views

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS0.00755EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/08 12:15 p.m.30 views

CVE-2021-41029

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests...

6.4CVSS0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/08 12:15 p.m.24 views

CVE-2021-42752

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests...

5.4CVSS0.00515EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/08 12:15 p.m.28 views

Cross site scripting

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests...

3.5CVSS5.5AI score0.00515EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/12/08 11:29 a.m.16 views

CVE-2021-41029

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests...

6.4CVSS7AI score0.00515EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/08 11:15 a.m.9 views

CVE-2021-4050

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.3AI score0.0085EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/12/08 12:00 a.m.9 views

livehelperchat 跨站脚本漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to improper input during web page generation...

6.1CVSS5.8AI score0.0085EPSS
SaveExploits1References3
Fortinet
Fortinet
added 2021/12/07 12:00 a.m.38 views

FortiWLM - stored cross-site scripting in hotspot profile controller

An improper neutralization of input during web page generation vulnerability 'Cross-site Scripting' CWE-79 in FortiWLM may allow an authenticated attacker to perform a stored cross site scripting attack XSS via storing malicious payloads and trigger the attack on victim's client via various...

3.5CVSS2AI score0.00515EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2021/12/03 8:43 p.m.35 views

Cross-site Scripting in kimai2

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS2.1AI score0.00764EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/12/03 8:40 p.m.32 views

GHSA-5FH3-25XR-G85H snipe-it is vulnerable to Cross-site Scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.3AI score0.00635EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/12/01 6:27 p.m.33 views

Hexo Vulnerable to XSS

Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code...

5CVSS5.3AI score0.00328EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2021/12/01 11:15 a.m.37 views

CVE-2021-3994

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9.6CVSS0.01354EPSS
SaveExploits1References2
Rows per page
Query Builder