CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2023/04/25 12:00 a.m.•1 views

CVE-2023-25347: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the "Title" Input Field in EventEditor.php...

5.4CVSS5.8AI score0.00622EPSS

SaveExploits1References3

Prion•added 2019/11/14 3:15 p.m.•26 views

Cross site scripting

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...

3.5CVSS5AI score0.00523EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2019/11/14 2:03 p.m.•41 views

CVE-2019-18649

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...

5.1AI score0.00523EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2019/11/14 12:00 a.m.•2 views

CVE-2019-18649: Improper Neutralization of Input During Web Page Generation

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...

4.8CVSS5.6AI score0.00523EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by