Lucene search
+L

1457 matches found

NVD
NVD
•added 2024/10/25 5:15 p.m.•31 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS0.00444EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/10/25 5:15 p.m.•18 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS6.8AI score0.00444EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•20 views

PT-2024-33197 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 6.0.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the z parameter. Recommendations: For Sentry version 6.0.9, consider restricting access to the vulnerable parameter z to...

6.5CVSS6.8AI score0.00444EPSS
SaveExploits1References3
CVE
CVE
•added 2024/10/25 12:00 a.m.•85 views

CVE-2024-48743

Sentry version v.6.0.9 is affected by a Cross Site Scripting (XSS) vulnerability (CWE-79) that allows a remote attacker to execute arbitrary code via the z parameter . To minimize the risk of exploitation, it is recommended to restrict access to the vulnerable z parameter . As of the provided doc...

6.5CVSS6.8AI score0.00444EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/25 12:00 a.m.•23 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.8AI score0.00444EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•19 views

Sentry security vulnerabilities

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version v.6.0.9. An attacker can exploit the vulnerability to execute arbitrary code via the z parameter...

6.5CVSS6.7AI score0.00444EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•8 views

CVE-2024-48743: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS6.9AI score0.00444EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/25 12:00 a.m.•40 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

0.00444EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/23 11:15 a.m.•49 views

CVE-2024-10276

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

6.1CVSS0.00388EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/10/23 11:15 a.m.•14 views

CVE-2024-10276

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

6.1CVSS3.3AI score0.00388EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/10/23 11:00 a.m.•33 views

CVE-2024-10276 Telestream Sentry Reports Page page cross site scripting

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

5.3CVSS3.3AI score0.00388EPSS
SaveExploits1References3
CVE
CVE
•added 2024/10/23 11:00 a.m.•77 views

CVE-2024-10276

Telestream Sentry 6.0.9 contains a cross-site scripting (XSS) vulnerability in the Reports Page component, specifically via the /?page=reports endpoint where manipulating the z argument can be exploited remotely. Several connected sources confirm the vulnerability in Telestream Sentry 6.0.9, with...

6.1CVSS3.3AI score0.00388EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/10/23 11:00 a.m.•44 views

CVE-2024-10276 Telestream Sentry Reports Page page cross site scripting

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

5.3CVSS0.00388EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•19 views

PT-2024-16151 · Telestream · Telestream Sentry

Name of the Vulnerable Software and Affected Versions: Telestream Sentry version 6.0.9 Description: A vulnerability has been found in the Reports Page component of the affected software, specifically in the file "/?page=reports". The manipulation of the z argument leads to cross-site scripting. T...

6.1CVSS4.4AI score0.00388EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•8 views

CVE-2024-10276: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

6.1CVSS3.3AI score0.00388EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•17 views

Tektronix Sentry cross-site scripting vulnerability

Tektronix Sentry is a video quality monitor from Tektronix. A cross-site scripting vulnerability exists in Tektronix Sentry version 6.0.9, which stems from the Reports Page component's /?page=report location containing a cross-site scripting vulnerability...

6.1CVSS5AI score0.00388EPSS
SaveExploits1References3
Redos
Redos
•added 2024/10/22 12:00 a.m.•20 views

ROS-20241021-05

Vulnerability in Sentry SDK real-time crash reporting software is related to a leak of sensitive cookie values. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...

7.6CVSS6.6AI score0.00647EPSS
SaveExploits0
Veracode
Veracode
•added 2024/10/08 7:24 a.m.•9 views

Prototype Pollution

@sentry/browser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate checks on user input or unsafe handling of data within an application when data is not properly validated or sanitized. It allows attackers to manipulate the prototype of objects, leading to potential...

7.1AI score
SaveExploits0
osv_cve
osv_cve
•added 2024/10/04 2:15 p.m.•23 views

CVE-2024-9410

Ada.cx's Sentry configuration allowed for blind server-side request forgeries SSRF through the use of a data scraping endpoint...

5.3CVSS5.9AI score0.00331EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/04 1:23 p.m.•55 views

CVE-2024-9410 Ada.cx SSRF via Sentry Misconfiguration

Ada.cx's Sentry configuration allowed for blind server-side request forgeries SSRF through the use of a data scraping endpoint...

5.3CVSS0.00331EPSS
SaveExploits1References1
Rows per page
Query Builder