Lucene search
K

123 matches found

NVD
NVD
added 2025/03/26 7:15 p.m.7 views

CVE-2025-29322

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

4.6CVSS0.00456EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/26 12:0 a.m.2 views

CVE-2025-29322

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

6.3AI score0.00456EPSS
Exploits0References2
CVE
CVE
added 2025/03/26 12:0 a.m.54 views

CVE-2025-29322

ScriptCase CVE-2025-29322 describes a cross-site scripting (XSS) vulnerability in ScriptCase prior to v1.0.003 – Build 3. The issue allows an attacker to execute arbitrary code through a crafted payload entered in the Connection Name field on the New Connection and Rename Connection pages. The CV...

4.6CVSS6.3AI score0.00456EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.1 views

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase v1.0.003 - versions prior to Build 3, which stems from a specially crafted payload that could lead to the execution of arbitrary code...

4.6CVSS6.9AI score0.00456EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.1 views

Scriptcase 安全漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase version v.1.0.002 Build 7, which stems from HTTP response manipulation and could lead to elevation of privilege...

9.8CVSS6.6AI score0.01097EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/26 12:0 a.m.8 views

CVE-2025-29322

A cross-site scripting XSS vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary code via a crafted payload to the "Connection Name" in the New Connection and Rename Connection pages...

0.00456EPSS
Exploits0References2
NVD
NVD
added 2024/10/01 9:15 p.m.9 views

CVE-2024-46080

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmzip function...

8CVSS0.0179EPSS
Exploits1References1
OSV
OSV
added 2024/10/01 9:15 p.m.1 views

CVE-2024-46080

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmzip function...

8CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2024/10/01 9:15 p.m.2 views

CVE-2024-46084

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...

8CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2024/10/01 9:15 p.m.1 views

CVE-2024-46082

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting XSS in nmcor.php via the form and field parameters...

5.4CVSS5.8AI score0.00169EPSS
Exploits1References2
NVD
NVD
added 2024/10/01 9:15 p.m.16 views

CVE-2024-46082

Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting XSS in nmcor.php via the form and field parameters...

5.4CVSS0.00169EPSS
Exploits1References2
NVD
NVD
added 2024/10/01 9:15 p.m.9 views

CVE-2024-46084

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...

8CVSS0.0179EPSS
Exploits1References2
NVD
NVD
added 2024/10/01 7:15 p.m.11 views

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

5.4CVSS0.00216EPSS
Exploits1References1
OSV
OSV
added 2024/10/01 7:15 p.m.0 views

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

5.4CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2024/10/01 7:15 p.m.1 views

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

6.1CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/10/01 7:15 p.m.1 views

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

5.4CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/10/01 7:15 p.m.8 views

CVE-2024-46079

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS in projnew.php via the Descricao parameter...

6.1CVSS0.00122EPSS
Exploits1References1
NVD
NVD
added 2024/10/01 7:15 p.m.11 views

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

5.4CVSS0.00146EPSS
Exploits1References1
CVE
CVE
added 2024/10/01 12:0 a.m.43 views

CVE-2024-46081

Scriptcase versions 9.10.023 and earlier are affected by a Cross Site Scripting (XSS) vulnerability in the To-Do List. An authenticated user can craft payloads that trigger a stored XSS when the assigned user interacts with tasks, with the effect of exposing other users to injected content. Affec...

5.4CVSS5.8AI score0.00146EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/01 12:0 a.m.10 views

CVE-2024-46084

Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution RCE via the nmunzip function...

0.0179EPSS
Exploits1References2
Rows per page
Query Builder