Lucene search
K

25 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-47904

Malicious code in bioql PyPI...

10CVSS6.6AI score0.02509EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-44044

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00086EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:42 a.m.2 views

CVE-2024-7873

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...

9.4CVSS5.8AI score0.00204EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/09/17 1:15 p.m.2 views

CVE-2024-7873

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...

9.4CVSS5.8AI score0.00204EPSS
Exploits0References3
NVD
NVD
added 2024/09/17 1:15 p.m.15 views

CVE-2024-7873

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...

9.4CVSS0.00204EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/17 12:33 p.m.20 views

CVE-2024-7873 Stored XSS in Veribilim Software's Veribase Order Management

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...

9.4CVSS0.00204EPSS
Exploits0References2
CVE
CVE
added 2024/09/17 12:33 p.m.41 views

CVE-2024-7873

Veribase Order (Veribilim Software) is affected by CVE-2024-7873 due to improper neutralization of input during web page generation, leading to stored XSS. Affected versions are prior to 4.010.3. The vulnerability is triggered by unsafe handling of input that is later reflected in web pages and p...

9.4CVSS5.8AI score0.00204EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/17 12:33 p.m.10 views

CVE-2024-7873 Stored XSS in Veribilim Software's Veribase Order Management

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting XSS...

9.4CVSS5.8AI score0.00204EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/17 12:0 a.m.1 views

Veribilim Veribase Order 安全漏洞

Veribilim Veribase Order is an application from Veribilim, Inc. A security vulnerability exists in Veribilim Veribase Order prior to v4.010.3, which stems from an improper neutralization of inputs during web page generation, resulting in a cross-site scripting vulnerability...

9.4CVSS6.1AI score0.00204EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.2 views

PT-2024-38649

Name of the Vulnerable Software and Affected Versions Veribase Order versions prior to 4.010.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS, Cross-Site Scripting, exploitation of...

9.4CVSS5.6AI score0.00204EPSS
Exploits0References10
ATTACKERKB
ATTACKERKB
added 2024/08/12 3:15 p.m.2 views

CVE-2024-6917

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2...

10CVSS5.8AI score0.02509EPSS
Exploits0References3
OSV
OSV
added 2024/08/12 3:15 p.m.1 views

CVE-2024-6917

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2...

9.8CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/12 2:51 p.m.14 views

CVE-2024-6917 RCE in Veribilim Software's Veribase Order Management

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2...

10CVSS5.8AI score0.02509EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/12 2:51 p.m.23 views

CVE-2024-6917 RCE in Veribilim Software's Veribase Order Management

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2...

10CVSS0.02509EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.1 views

Veribilim Software Veribase 操作系统命令注入漏洞

Veribilim Software Veribase is an application from Veribilim Software. An operating system command injection vulnerability exists in Veribilim Software Veribase versions prior to v4.010.2, which stems from the use of incorrect special element neutralization, resulting in operating system command...

10CVSS7.5AI score0.02509EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/12 12:0 a.m.2 views

PT-2024-37956

Name of the Vulnerable Software and Affected Versions Veribase Order Management versions prior to v4.010.2 Description The issue is related to an OS Command Injection vulnerability, which allows unauthorized access due to improper neutralization of special elements used in an OS command. This...

10CVSS5.5AI score0.02509EPSS
Exploits0References12
OSV
OSV
added 2023/11/23 9:15 a.m.1 views

CVE-2023-3377

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection.This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/23 9:15 a.m.0 views

CVE-2023-3377

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS7.3AI score0.00086EPSS
Exploits0References4
NVD
NVD
added 2023/11/23 9:15 a.m.11 views

CVE-2023-3377

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS0.00086EPSS
Exploits0References3
Prion
Prion
added 2023/11/23 9:15 a.m.10 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection.This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

7.5CVSS7.8AI score0.00086EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder