PT-2022-20369

Name of the Vulnerable Software and Affected Versions Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" Description The issue is related to Cross-Site Scripting XSS and can be exploited via the admin-MaintenanceDevice Management section. Thi...

PT-2022-19900

Name of the Vulnerable Software and Affected Versions Strapi versions 3.x.x and earlier Description The issue is related to a stored cross-site scripting vulnerability in the file upload function. This vulnerability allows an arbitrary script to be executed on the web browser of the user who is...

CVE-2022-30738

Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...

CVE-2022-30738

Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...

CVE-2022-30738: Improper Check or Handling of Exceptional Conditions

Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script...

PT-2022-20276

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 17.0.1.69 Description The issue is related to an improper check in the Loader component of Samsung Internet, which allows attackers to spoof the address bar by executing a script. This can potentially lead to...

CVE-2022-29296

A reflected cross-site scripting XSS vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

h2: Loading of custom classes from remote servers through JNDI

A flaw was found in the H2 Console. This flaw allows remote attackers to execute arbitrary code via a JDBC URL, concatenating with a substring that allows remote code execution by using a script...

PT-2022-19524

Name of the Vulnerable Software and Affected Versions Avantune Genialcloud ProJ - 10 Description A reflected cross-site scripting XSS vulnerability in the login portal allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For Avantune Genialcloud ProJ -...

PT-2022-19821

Name of the Vulnerable Software and Affected Versions XXL-Job version 2.3.0 Description A stored cross-site scripting XSS issue was found in XXL-Job via the "/xxl-job-admin/jobinfo" API endpoint. This allows for malicious script execution. Recommendations For XXL-Job version 2.3.0, as a temporary...

PT-2022-4929

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal versions 7.10 through 7.50 Description The issue is related to improper sanitization of user inputs, allowing an unauthenticated attacker to execute scripts. This can lead to a limited impact on the...

WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting

Overview WordPress Plugin "Modern Events Calendar Lite" provided by Webnus contains a stored cross-site scripting vulnerability CWE-79. Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

CVE-2022-1646

The Simple Real Estate Pack WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient...

CVE-2022-29628: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter...

PT-2022-19408

Name of the Vulnerable Software and Affected Versions Dell Unity versions prior to 5.2.0.0.5.173 Dell UnityVSA versions prior to 5.2.0.0.5.173 Dell UnityXT versions prior to 5.2.0.0.5.173 Description The issue is a Reflected Cross-Site Scripting Vulnerability in the Unisphere GUI. An...

Cross site scripting

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29362: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter...

CVE-2022-29359

CVE-2022-29359 affects School Club Application System v0.1. It describes a stored XSS vulnerability in /scas/?page=clubs/application_form&id=7 (or id=7) where an attacker can inject a crafted payload via the firstname parameter to execute arbitrary web scripts/HTML. The issue is confirmed across ...

com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2), org.jenkins-ci.main:jenkins-test-harness (1.550) +2 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.550)

org.jenkins-ci.main:jenkins-core MAVEN version 1.550 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.1, =0.2 - org.jenkins-ci.main:jenkins-test-harness...