Stored Cross Site Scripting (XSS)

aim is vulnerable to a Stored Cross Site Scripting XSS. The vulnerability is due to improper input neutralization in the logs-tab, which uses dangerouslySetInnerHTML in React. The vulnerability allows an attacker to inject malicious scripts into the logs...

GHSA-P9F2-JG9W-CX69 Aim Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

CVE-2024-6578

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

CVE-2024-6578

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the "dangerouslySetInnerHTML"...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to version 17.6 and iPadOS prior to version 17.6, which originates from...

CVE-2024-6578: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

PT-2024-37732

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.19.3 Description A stored cross-site scripting XSS issue exists due to the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using...

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

CVE-2024-4786

Based on the connected sources, CVE-2024-4786 concerns Lenovo Tab K10 and is described as an improper validation vulnerability that could allow a specially crafted application to keep the device on. The NVD/Red Hat entries reiterate this description without detailing affected software versions, e...

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

CVE-2024-4786: Improper Certificate Validation

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

Lenovo Tab K10 信任管理问题漏洞

Lenovo Tab K10 is a smartphone from Lenovo China. The Lenovo Tab K10 suffers from a trust management issue vulnerability that originates from allowing specially designed applications to keep the device turned on...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16721)

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to store XSS on the code inspection tab...

JetBrains TeamCity < 2024.07 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.07. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07 parameters of the password type could leak into the build log in some specific cases CVE-2024-41824 - In JetBrains...

CVE-2024-41825

In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab...

CVE-2024-41825

CVE-2024-41825 affects JetBrains TeamCity prior to 2024.07. Public sources describe a stored cross-site scripting (XSS) vulnerability on the Code Inspection tab, enabling an attacker to inject script that persists in the UI. Reported impact is limited to confidentiality and integrity (per CVSS ve...