Lucene search
+L

5972 matches found

Github Security Blog
Github Security Blog
•added 2023/05/04 3:30 a.m.•33 views

Stored cross site scripting in Microbin

A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS5.2AI score0.00409EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2023/05/04 2:15 a.m.•26 views

CVE-2023-27075

A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS5.3AI score0.00409EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•40 views

CVE-2023-30095

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

5.4AI score0.00667EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•37 views

CVE-2023-27075

A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.5AI score0.00409EPSS
SaveExploits1References2
Mend
Mend
•added 2023/05/04 12:00 a.m.•7 views

CVE-2023-30097

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4CVSS0.00667EPSS
SaveExploits1References4
CNVD
CNVD
•added 2023/05/04 12:00 a.m.•19 views

OURPHP ourphp_tz.php file cross-site scripting vulnerability

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station-building system. OURPHP 7.2.0 version and previous versions of the existence of cross-site scripting vulnerability , the vulnerability stems from th...

6.1CVSS6.8AI score0.01173EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•35 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.5AI score0.00667EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•48 views

CVE-2023-30097

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4AI score0.00667EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•43 views

CVE-2023-30184

A stored cross-site scripting XSS vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment...

5.4AI score0.00394EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•6 views

CVE-2023-30095: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•6 views

CVE-2023-30096: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/05/04 12:00 a.m.•17 views

CVE-2023-30184

A stored cross-site scripting XSS vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment...

5.4CVSS5.7AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2023/05/04 12:00 a.m.•45 views

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

6.1CVSS5.9AI score
SaveExploits0References4
osv_cve
osv_cve
•added 2023/05/04 12:00 a.m.•22 views

CVE-2023-27075

A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•55 views

CVE-2023-30094

A stored cross-site scripting XSS vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...

5.4AI score0.00667EPSS
SaveExploits1References3
Mend
Mend
•added 2023/05/04 12:00 a.m.•4 views

CVE-2023-30094

A stored cross-site scripting XSS vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module...

5.4CVSS0.00667EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•8 views

CVE-2023-30097: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/04 12:00 a.m.•8 views

PT-2023-20936

Name of the Vulnerable Software and Affected Versions Microbin version 1.2.0 Description A cross-site scripting vulnerability in the component microbin/src/pasta.rs of Microbin allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For Microbin version...

5.4CVSS6.1AI score0.00409EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2023/05/04 12:00 a.m.•22 views

TotalJS Flow 跨站脚本漏洞

TotalJS Flow is an open source application for the Total.js Platform. A security vulnerability exists in version v10 of TotalJS Flow. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the Platform Name field in the...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•6 views

CVE-2023-27075: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS6AI score0.00409EPSS
SaveExploits1References3
Rows per page
Query Builder