Amazon Linux 2 : thunderbird (ALAS-2024-2497)

The version of thunderbird installed on the remote host is prior to 115.8.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2497 advisory. The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message i...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:0893-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0893-1 advisory. Security Vulnerabilities fixed in Thunderbird 115.8.1 bsc1221054: - CVE-2024-1936: Fixed leaking of...

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

CVE-2023-42308

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

CVE-2023-42308

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

Advisory ROSA-SA-2024-2372

Software: openldap 2.4.46 OS: ROSA Virtualization 2.1 packageevrstring: openldap-2.4.46-10.el8.src.rpm CVE-ID: CVE-2020-15719 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: libldap in some third-party OpenLDAP packages has a certificate validation error when the third-party package asserts support for...

CVE-2023-42307: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

Customer Support System Cross-Site Scripting Vulnerability (CNVD-2024-14028)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

CVE-2023-42308

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

Exam Form Submission Cross-Site Scripting Vulnerability

Code-Projects Exam Form Submission is a Code-Projects open source exam form. A cross-site scripting vulnerability exists in Exam Form Submission version 1.0, which stems from a cross-site scripting vulnerability in Manage Fastrack Subjects that allows an attacker to execute arbitrary code via...

PT-2024-13037 · Unknown · Code-Projects Exam Form Submission

Name of the Vulnerable Software and Affected Versions: Code-Projects Exam Form Submission version 1.0 Description: The issue allows attackers to run arbitrary code via the Subject Name and Subject Code sections, potentially leading to unauthorized actions. This is a Cross Site Scripting XSS issue...

CVE-2023-42307

Cross Site Scripting XSS vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section...

Exam Form Submission Cross-Site Scripting Vulnerability

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. A cross-site scripting vulnerability exists in Exam Form Submission version 1.0 that originates from allowing an attacker to execute arbitrary code via Subject Name and Subject Code...

CVE-2023-42308: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section...

PT-2024-13036

Name of the Vulnerable Software and Affected Versions Code-Projects Exam Form Submission version 1.0 Description A Cross Site Scripting XSS issue affects the software, allowing attackers to execute arbitrary code through the Subject Name and Subject Code sections. This enables attackers to run...

Cross site scripting

Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...

PT-2024-21166 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Insurance Management System version 1.0 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket. This enables attackers to...

CVE-2024-25854: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...