Lucene search
+L

150543 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•5 views

CVE-2025-29594: Improper Neutralization of Input During Web Page Generation

A vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where user-controlled input is not adequately validated before being processed. Specifically, the $GET'errorcode' parameter can be manipulated to access unauthorized error codes, leading to Cross-Site Scriptin...

6.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•20 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.0029EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•23 views

The vulnerability of Microsoft Edge browser on the iOS operating system, related to insufficient protection of the website structure, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on the iOS operating system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5CVSS7.5AI score0.00783EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2025/04/07 12:00 a.m.•3 views

CVE-2025-29594

A vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where user-controlled input is not adequately validated before being processed. Specifically, the $GET'errorcode' parameter can be manipulated to access unauthorized error codes, leading to Cross-Site Scriptin...

6.1CVSS0.00244EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/06 5:18 p.m.•38 views

CVE-2025-32258

Missing Authorization vulnerability in InfoGiants Simple Website Logo simple-website-logo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Website Logo: from n/a through = 1.1...

5.3CVSS7.2AI score0.00317EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2025/04/06 3:44 p.m.•14 views

welinadama.com Cross Site Scripting vulnerability OBB-4042451

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/06 9:06 a.m.•11 views

expressoembaixador.com.br Cross Site Scripting vulnerability OBB-4042439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/06 9:04 a.m.•19 views

zssrosciszewo.szkolnastrona.pl Cross Site Scripting vulnerability OBB-4042435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/06 9:00 a.m.•13 views

noor-automobile.de Cross Site Scripting vulnerability OBB-4042424

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/06 8:56 a.m.•13 views

ekonomikoll.se Cross Site Scripting vulnerability OBB-4042411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/06 8:53 a.m.•14 views

smartauto.ctimes.com.tw Cross Site Scripting vulnerability OBB-4042403

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/05 3:17 p.m.•20 views

landfrauen-lingen.info Cross Site Scripting vulnerability OBB-4042381

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/05 1:47 p.m.•15 views

papirus.az Cross Site Scripting vulnerability OBB-4042371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/05 9:58 a.m.•20 views

vpsmalaysia.com.my Open Redirect vulnerability OBB-4042355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/04 7:51 p.m.•18 views

yorkville.com Cross Site Scripting vulnerability OBB-4042311

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2025/04/04 4:15 p.m.•13 views

CVE-2025-32258

Missing Authorization vulnerability in InfoGiants Simple Website Logo simple-website-logo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Website Logo: from n/a through = 1.1...

5.3CVSS0.00317EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•10 views

CVE-2025-32258 WordPress Simple Website Logo plugin <= 1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in InfoGiants Simple Website Logo allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Website Logo: from n/a through 1.1...

5.3CVSS7.1AI score0.00317EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2025/04/04 3:46 p.m.•18 views

tvgfbf.gov.tr Cross Site Scripting vulnerability OBB-4042303

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/04 3:38 p.m.•17 views

camarauruoca.ce.gov.br Cross Site Scripting vulnerability OBB-4042302

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2025/04/04 1:22 p.m.•11 views

nafaxles.com Cross Site Scripting vulnerability OBB-4042288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder