23342 matches found
CVE-2020-36960 Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...
CVE-2020-36960
Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like '' to execute arbitrary JavaScript when the profile is viewed by other users...
EUVD-2020-30854
Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...
CVE-2020-36960
Forma LMS 2.3 contains a stored cross-site scripting (XSS) vulnerability in the user profile first/last name fields. An attacker can inject scripts (e.g., ) that execute when other users view the profile. Connected sources provide CVSS scores (4.0: 5.1/ MEDIUM; 3.1: 6.4/ MEDIUM) and confirm the v...
CVE-2020-36960 Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...
CVE-2026-24131
creationtimestamp| type| source ---|---|--- 2026-01-26 15:43:17+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-v253-rj99-jwpq 2026-01-27 01:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelaw2rhn2r...
CVE-2026-23890
creationtimestamp| type| source ---|---|--- 2026-01-26 15:42:24+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-xpqm-wm3m-f34h 2026-01-27 01:18:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelnzi7wc2i...
CVE-2026-22586
Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January...
CVE-2026-22585
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...
CVE-2026-24404
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, CIccXmlArrayType contains a Null Pointer Dereference and Undefined Behavior vulnerability. This occurs when user-controllable input is unsafely...
CVE-2026-24403
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In versions 2.3.1.1 and below, an integer overflow vulnerability exists in icValidateStatus CIccProfile::CheckHeader when user-controllable input is incorporated into profile data...
BIT-MOODLE-2025-3640 Moodle: idor in web service allows users enrolled in a course to access some details of other users
A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access...
CVE-2025-59109
creationtimestamp| type| source ---|---|--- 2026-01-26 13:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddcvhxbxb2g...
CVE-2025-59092
creationtimestamp| type| source ---|---|--- 2026-01-26 12:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdd7eyvwvj2i...
CVE-2026-1420
creationtimestamp| type| source ---|---|--- 2026-01-26 07:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcqyu4zxi26 2026-01-26 15:11:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115962037145287831...
CVE-2026-1427
creationtimestamp| type| source ---|---|--- 2026-01-26 07:33:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10655-59160-2.html 2026-01-26 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdcuydgw3f2m 2026-01-26 09:58:34+00:00| seen|...
CVE-2026-1418
creationtimestamp| type| source ---|---|--- 2026-01-26 07:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcpmbrn5j2c...
CVE-2026-1424
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2026-1424
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...