Lucene search
+L

8829 matches found

CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•16 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•18 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00771EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•21 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.0051EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•6 views

CVE-2024-26081: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS5.8AI score0.00738EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•6 views

CVE-2024-36178: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS5.8AI score0.0051EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•15 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00717EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•15 views

Adobe Experience Manager security vulnerabilities

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.4AI score0.00502EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•17 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.6AI score0.00473EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/06/11 3:15 a.m.•16 views

CVE-2024-34686

Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify...

6.1CVSS5.8AI score0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•6 views

PT-2024-4706

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. It could be exploited by an attacker to inject malicious scripts into vulnerable form fields. When a...

5.5CVSS0.00534EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•3 views

PT-2024-4709

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This vulnerability could be exploited by an attacker to inject malicious scripts into vulnerable form...

5.5CVSS5.8AI score0.00385EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•7 views

PT-2024-4951

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This could allow an attacker to inject malicious scripts into vulnerable form fields. When a victim...

5.5CVSS5.8AI score0.00717EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•4 views

PT-2024-4924

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. It could be exploited by an attacker to inject malicious scripts into vulnerable form fields. When a...

5.5CVSS5.8AI score0.00502EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•7 views

PT-2024-4617

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. This vulnerability could be exploited by an attacker to inject malicious scripts into vulnerable form...

5.5CVSS5.8AI score0.00385EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/06/11 12:00 a.m.•23 views

MeterSphere cross-site scripting vulnerabilities

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere 1.10.1-lts previous versions of cross-site scripting vulnerability , the vulnerability stems from the application of the user-supplied data lack of effective filtering and escaping , an attacker c...

6.1CVSS6.4AI score0.00355EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•20 views

PT-2024-26106 · Sap · Sap Crm Webclient Ui

Name of the Vulnerable Software and Affected Versions: SAP CRM WebClient UI affected versions not specified Description: The issue arises due to insufficient input validation, allowing an unauthenticated attacker to craft a URL link that embeds a malicious script. When a victim clicks on this lin...

6.1CVSS6.9AI score0.00266EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2024/06/07 8:10 p.m.•651 views

Exploit for OS Command Injection in Php

CVE-2024-4577 Vulnerability Checker This script is designed t...

9.8CVSS9.5AI score0.99987EPSS
SaveExploits72
osv_ghsa
osv_ghsa
•added 2024/06/07 7:37 p.m.•94 views

GHSA-5PXR-7M4J-JJC6 Cross-site scripting (XSS) vulnerability in Description metadata

Summary Regardless of the role or privileges, no user should be able to inject malicious JavaScript JS scripts into the body HTML. an XSS Cross-Site Scripting vulnerability, specifically a Stored XSS, which affects all pages of the website. Once the JS script is embedded in the body HTML, the XSS...

4.8CVSS5.7AI score0.00463EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/06/07 2:28 p.m.•52 views

CVE-2024-36773

A cross-site scripting XSS vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php...

0.00366EPSS
SaveExploits1References1
Mend
Mend
•added 2024/06/07 2:09 p.m.•8 views

CVE-2024-37160

Formwork is a flat file-based Content Management System CMS. An attackers requires administrator privilege to execute arbitrary web scripts by modifying site options via /panel/options/site. This type of attack is suitable for persistence, affecting visitors across all pages except the dashboard...

4.8CVSS0.00463EPSS
SaveExploits1References6
Rows per page
Query Builder