Lucene search
+L

109 matches found

Prion
Prion
added 2022/04/29 8:15 p.m.19 views

Cross site scripting

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

3.5CVSS5.2AI score0.00977EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2022/04/29 8:00 p.m.35 views

CVE-2022-25854 Cross-site Scripting (XSS)

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

5.4CVSS5.5AI score0.00977EPSS
SaveExploits1References5
OSV
OSV
added 2022/04/29 8:00 p.m.27 views

CVE-2022-25854 Cross-site Scripting (XSS)

This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload...

5.4CVSS6.2AI score
SaveExploits0References7
CVE
CVE
added 2022/04/29 8:00 p.m.90 views

CVE-2022-25854

The CVE affects @yaireo/tagify before 4.9.8. The root cause is that the placeholder input is not escaped in the Tagify rendering logic (tagify.js), enabling an attacker to inject and trigger XSS via a malicious placeholder value. Impact is XSS in inputs using Tagify; exploitation details are not ...

5.4CVSS5.2AI score0.00977EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2022/02/24 12:00 a.m.8 views

components-react 跨站脚本漏洞

components-react is a set of React components that help create intuitive, responsive and accessible user experiences for web applications. A cross-site scripting vulnerability exists in versions prior to @awsui/components-react 3.0.367 that could allow javascript injection...

8.8CVSS6.8AI score0.00692EPSS
SaveExploits0References4
Fedora
Fedora
added 2016/10/09 3:06 a.m.41 views

[SECURITY] Fedora 25 Update: mojarra-2.2.13-1.fc25

JvaServerTM Faces technology simplifies building user interfaces for JavaServer applications. Developers of various skill levels can quickly bui ld web applications by: assembling reusable UI components in a page; connecting these components to an application data source; and wiring...

4.3CVSS2.4AI score0.04715EPSS
SaveExploits0
Fedora
Fedora
added 2014/11/01 4:22 p.m.14 views

[SECURITY] Fedora 21 Update: python-django-horizon-2014.1.3-1.fc21

Horizon is a Django application for providing Openstack UI components. It allows performing site administrator viewing account resource usage, configuring users, accounts, quotas, flavors, etc. and end user operations start/stop/delete instances, create/restore snapshots, view instance VNC consol...

3.6AI score
SaveExploits0
OpenVAS
OpenVAS
added 2014/05/02 12:00 a.m.28 views

Fedora Update for python-django-horizon FEDORA-2014-5002

Check for the Version of python-django-horizon OpenVAS Vulnerability Test Fedora Update for python-django-horizon FEDORA-2014-5002 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

4.3CVSS0.1AI score0.01216EPSS
SaveExploits1References2
Fedora
Fedora
added 2012/04/26 8:08 p.m.64 views

[SECURITY] Fedora 17 Update: python-django-horizon-2012.1-2.fc17

Horizon is a Django application for providing Openstack UI components. It allows performing site administrator viewing account resource usage, configuring users, accounts, quotas, flavors, etc. and end user operations start/stop/delete instances, create/restore snapshots, view instance VNC consol...

4.3CVSS6.4AI score0.02435EPSS
SaveExploits0
Rows per page
Query Builder