15 matches found
EUVD-2023-38323
Malicious code in bioql PyPI...
CVE-2023-34226
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...
CVE-2024-36372
In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible...
EUVD-2024-36040
In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible...
PT-2024-3959
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05.6 Description The issue is related to a reflected XSS vulnerability on the subscriptions page, which could allow a remote attacker to conduct cross-site scripting attacks. This is due to the lack of...
CVE-2024-36372: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible...
CVE-2023-34226
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...
CVE-2023-34226
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...
CVE-2023-34226
CVE-2023-34226 affects JetBrains TeamCity prior to version 2023.05, where a reflected cross-site scripting (XSS) flaw was disclosed on the Subscriptions page. The issue arises from improper input handling that allows untrusted input to be reflected in the UI, enabling potential user‑driven script...
CVE-2023-34226
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...
CVE-2023-34226: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible...
PT-2023-24751 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue is related to reflected XSS in the Subscriptions page. Recommendations: For versions prior to 2023.05, update to version 2023.05 or later to resolve the issue...
WordPress 插件跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Konnichiwa! Membership 0.8.3 and earlier versions,...
CVE-2019-4589
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449...