Lucene search
K

296 matches found

OSV
OSV
added 2024/08/29 11:15 a.m.2 views

CVE-2024-5624

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

6.1CVSS6AI score0.00239EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.3 views

The vulnerability of the logging module in CMS systems like Netcat allows attackers to execute arbitrary JavaScript code.

The vulnerability of the logging module in CMS systems like Netcat exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.3 views

The vulnerability of the stats module in the Netcat CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the stats module in the Netcat CMS system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.4 views

The vulnerability of the `type` parameter in the Netcat module of the netshop CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the “type” parameter in the netshop CMS system’s Netcat CMS system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.4 views

The vulnerability of the filemanager module in the CMS system Netcat, which allows a hacker to execute arbitrary JavaScript code

The vulnerability of the filemanager module in the CMS system Netcat exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.5 views

The vulnerability of the component_id and object_id parameters of the Netcat landing CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the componentid and objectid parameters in the Netcat landing CMS system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.4 views

The vulnerability of the Netcat module in CMS systems allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Netcat landing module in CMS systems exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.3 views

The vulnerability of the alter_form.php function in the Netcat CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the alterform.php function in the Netcat CMS system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute any JavaScript code in the user’s browser remotely...

9CVSS5.5AI score
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/19 12:0 a.m.5 views

OPPO ColorOS Internet Browser com.heytap.browser 安全漏洞

OPPO ColorOS Internet Browser com.heytap.browser is an Android platform browser component application from OPPO, China. A security vulnerability exists in OPPO ColorOS Internet Browser com.heytap.browser version 45.10.3.4.1, which originates from a vulnerability that allows remote attackers to...

6.1CVSS7.4AI score0.00399EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.5 views

The vulnerability of the CDwnBindInfo function in the mshtml.dll library of Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the CDwnBindInfo function in the mshtml.dll library of the Internet Explorer browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code by sending a specially created HTML file...

9.3CVSS8.3AI score0.78823EPSS
Exploits12References10Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.6 views

PT-2024-5679 · Unknown · Netcat Cms

Name of the Vulnerable Software and Affected Versions: Netcat CMS affected versions not specified Description: The issue exists due to a lack of protection measures for the web page structure in the stats module of the Netcat CMS system. This allows a remote attacker to execute arbitrary JavaScri...

9CVSS7.6AI score
Exploits0References2
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.4 views

Solarized FireDown Browser & Downloader 安全漏洞

Solarized FireDown Browser & Downloader is a powerful browser for Android devices from Solarized. A security vulnerability exists in Solarized FireDown Browser & Downloader version 1.0.76, which originates from a vulnerability that could allow a remote attacker to execute arbitrary JavaScript cod...

6.3CVSS7.2AI score0.00642EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.8 views

PT-2024-24328 · Unknown · Com.Solarized.Firedown

Name of the Vulnerable Software and Affected Versions: com.solarized.firedown aka Solarized FireDown Browser & Downloader version 1.0.76 Description: The issue allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. This is possible because...

6.3CVSS7.6AI score0.00642EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.3 views

PT-2024-10381 · Strapi · Strapi

Name of the Vulnerable Software and Affected Versions: Strapi affected versions not specified Description: The issue is related to a lack of protection measures on web pages, allowing a remote attacker to execute arbitrary JavaScript code by uploading a specially crafted PDF file. Recommendations...

4CVSS7.7AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.5 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/29 12:0 a.m.3 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/29 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

4.8CVSS5.9AI score0.00427EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/28 12:0 a.m.3 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/28 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/28 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.8AI score0.00427EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder