Lucene search
+L

3200 matches found

attackerkb
attackerkb
•added 2023/07/11 2:15 a.m.•11 views

CVE-2023-37189

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.7AI score0.00735EPSS
SaveExploits2References3
Prion
Prion
•added 2023/07/11 2:15 a.m.•30 views

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.3CVSS5AI score0.00735EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•22 views

Issabel PBX Cross-Site Scripting Vulnerability

Issabel PBX is a software application. A free and open source software that allows you to build communication tools for your organization. A cross-site scripting vulnerability exists in Issabel PBX version v.4.0.0-6, which originates from a vulnerability that allows attackers to execute arbitrary...

4.8CVSS5.3AI score0.00735EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2023/07/11 12:00 a.m.•6 views

PT-2023-25825

Name of the Vulnerable Software and Affected Versions Issabel PBX version 4 Description A stored cross site scripting XSS issue exists in the "index.php?menu=billing rates" endpoint of Issabel PBX, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the...

4.8CVSS0.00735EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•10 views

CVE-2023-37189: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Name or Prefix fields under the Create New Rate module...

4.8CVSS5.4AI score0.00735EPSS
SaveExploits2References2
GithubExploit
GithubExploit
•added 2023/07/07 5:39 p.m.•12 views

Exploit for Cross-site Scripting in Issabel Pbx

CVE-2023-37189 — Issabel PBX 4.0.0-6 Stored Cross-Site Scripti...

4.8CVSS0.00735EPSS
SaveExploits2
NVD
NVD
•added 2023/06/28 9:15 p.m.•38 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.1AI score0.01611EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/06/28 9:15 p.m.•7 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS5.8AI score0.01611EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2023/06/28 9:15 p.m.•20 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.5AI score0.01611EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2023/06/28 9:15 p.m.•15 views

UBUNTU-CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS5.7AI score0.01611EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•19 views

GitLab security vulnerabilities

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab versions prior to 15.10 to 16.1, whi...

6.5CVSS6.5AI score0.01611EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/06/28 12:00 a.m.•37 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.3AI score0.01611EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/28 12:00 a.m.•14 views

PT-2023-18427 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 15.10 through 16.0 Description: An issue has been discovered in GitLab, leading to a ReDoS vulnerability in the Jira prefix. Recommendations: For GitLab versions 15.10 through 16.0, update to version 16.1 or later to resolve t...

6.5CVSS6.2AI score0.01611EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2023/06/28 12:00 a.m.•12 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.8AI score0.01611EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/28 12:00 a.m.•80 views

CVE-2023-2232

CVE-2023-2232 affects GitLab versions starting from 15.10 up to, but not including, 16.1. The vulnerability is described as a ReDoS in the Jira prefix, with a network-based exposure and a low privilege requirement (per CVSS 3.1 metadata). The connected documents consistently state the affected ra...

6.5CVSS6AI score0.01611EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/28 12:00 a.m.•4 views

CVE-2023-2232: Inefficient Regular Expression Complexity

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.5AI score0.01611EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2023/06/28 12:00 a.m.•75 views

CVE-2023-2232

Removed by vendor...

6.5CVSS6.6AI score0.01611EPSS
SaveExploits1
osv_cve
osv_cve
•added 2023/06/28 12:00 a.m.•40 views

CVE-2023-2232

An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix...

6.5CVSS6.7AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2023/06/27 6:47 a.m.•127 views

CVE-2023-36664

A vulnerability was found in Ghostscript. This flaw occurs due to a mishandled permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

8.4CVSS6.7AI score0.0385EPSS
SaveExploits4References3
SUSE CVE
SUSE CVE
•added 2023/06/27 1:25 a.m.•9 views

SUSE CVE-2023-36664

Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.5AI score0.0385EPSS
SaveExploits4References7
Rows per page
Query Builder