EUVD-2023-38323

Malicious code in bioql PyPI...

CVE-2023-34226

In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...

CVE-2024-36372

In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible...

EUVD-2024-36040

In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible...

PT-2024-3959

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05.6 Description The issue is related to a reflected XSS vulnerability on the subscriptions page, which could allow a remote attacker to conduct cross-site scripting attacks. This is due to the lack of...

CVE-2023-34226

In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...

CVE-2023-34226

In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...

CVE-2023-34226

In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...

CVE-2023-34226

CVE-2023-34226 affects JetBrains TeamCity prior to version 2023.05, where a reflected cross-site scripting (XSS) flaw was disclosed on the Subscriptions page. The issue arises from improper input handling that allows untrusted input to be reflected in the UI, enabling potential user‑driven script...

PT-2023-24751 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue is related to reflected XSS in the Subscriptions page. Recommendations: For versions prior to 2023.05, update to version 2023.05 or later to resolve the issue...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Konnichiwa! Membership 0.8.3 and earlier versions,...

CVE-2019-4589

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449...

CVE-2018-19814

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...