Lucene search
K

25 matches found

CVE
CVE
added 2025/12/17 8:12 a.m.6 views

CVE-2025-14347

CVE-2025-14347 describes a reflected Cross-Site Scripting (XSS) vulnerability in Proliz Software Ltd. OBS (Student Affairs Information System) prior to version 26.5009. The root cause is improper neutralization of input during web page generation, enabling reflected XSS. The CVE entry specifies n...

6.3CVSS5.8AI score0.00027EPSS
Exploits0References2
CVE
CVE
added 2025/11/06 2:51 p.m.4 views

CVE-2025-11956

Proliz OBS (Student Affairs Information System) is affected up to version 25.0401. The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation, enabling injection of untrusted data that persists in the system. Affected component: OBS web page generation...

8.9CVSS5.8AI score0.00039EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.2 views

PT-2025-45185

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. Co. OBS Student Affairs Information System versions prior to 25.0401 Description An Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS condition, exists in...

8.9CVSS6AI score0.00039EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/10/24 9:34 a.m.5 views

CVE-2025-10914

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS.This issue affects OBS Student Affairs Information System: before V26.0401...

7.6CVSS6.4AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/23 8:36 a.m.1 views

EUVD-2025-35659

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS.This issue affects OBS Student Affairs Information System: before V26.0401...

7.6CVSS5.9AI score0.00038EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.1 views

PT-2025-43434

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. Co. OBS Student Affairs Information System versions prior to V26.0401 Description A flaw exists in Proliz Software Ltd. Co. OBS Student Affairs Information System that allows for Reflected Cross-site Scripting XSS. This...

7.6CVSS6.1AI score0.00038EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5602

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00074EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5592

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.0046EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/25 1:30 p.m.6 views

CVE-2025-10467 Stored XSS in Proliz Software's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

8.9CVSS0.00041EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/25 1:30 p.m.2 views

CVE-2025-10467 Stored XSS in Proliz Software's OBS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

8.9CVSS5.4AI score0.00041EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/25 1:30 p.m.2 views

CVE-2025-10467

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Stored XSS. This issue affects OBS Student Affairs Information System: before v25.0401...

8.9CVSS5.5AI score0.00041EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/05 4:58 p.m.8 views

CVE-2024-8261

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...

9.8CVSS5.8AI score0.00074EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/05 4:58 p.m.6 views

CVE-2024-8262

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927...

9.8CVSS5.8AI score0.0046EPSS
Exploits0References1
OSV
OSV
added 2025/03/03 3:15 p.m.0 views

CVE-2024-8261

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OBS: before 24.0927...

7.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2025/03/03 3:15 p.m.0 views

CVE-2024-8262

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Proliz Software OBS allows Path Traversal.This issue affects OBS: before 24.0927...

9.8CVSS5.8AI score0.0046EPSS
Exploits0References1
NVD
NVD
added 2025/03/03 3:15 p.m.4 views

CVE-2024-8261

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...

9.8CVSS0.00074EPSS
Exploits0References2
NVD
NVD
added 2025/03/03 3:15 p.m.3 views

CVE-2024-8262

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927...

9.8CVSS0.0046EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/03/03 3:15 p.m.2 views

CVE-2024-8262

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927...

9.8CVSS5.8AI score0.0046EPSS
Exploits0References3
CVE
CVE
added 2025/03/03 2:25 p.m.62 views

CVE-2024-8262

CVE-2024-8262 describes a Path Traversal vulnerability in Proliz Software OBS. The issue affects OBS versions prior to 24.0927 and is caused by improper limitation of a pathname to a restricted directory, enabling traversal attacks. Red Hat and CNNVD entries corroborate the vulnerability and, in ...

9.8CVSS5.8AI score0.0046EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/03 2:25 p.m.15 views

CVE-2024-8262 Path Traversal in Proliz Software's OBS

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Proliz Software OBS allows Path Traversal. This issue affects OBS: before 24.0927...

9.8CVSS5.8AI score0.0046EPSS
Exploits0References2
Rows per page
Query Builder