Lucene search
+L

11958 matches found

Cvelist
Cvelist
added 2024/01/31 7:00 p.m.117 views

CVE-2024-1111 SourceCodester QR Code Login System add-user.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

5CVSS6.3AI score0.00415EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/31 3:12 p.m.86 views

BIT-CIVICRM-2023-25440

Stored Cross Site Scripting XSS vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field...

5.4CVSS5.2AI score0.02537EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/01/31 12:00 a.m.15 views

SourceCodester QR Code Login System 安全漏洞

QR Code Login System is a modern authentication QR code solution for rems individual developers. A security vulnerability exists in the SourceCodester QR Code Login System version 1.0, which stems from the fact that add-user.php contains an unknown function that leads to cross-site scripting via...

6.1CVSS5.6AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/31 12:00 a.m.13 views

PT-2024-16770

Name of the Vulnerable Software and Affected Versions SourceCodester QR Code Login System version 1.0 Description A vulnerability has been found in the SourceCodester QR Code Login System, affecting some unknown functionality of the file add-user.php. The manipulation of the qr-code argument lead...

6.1CVSS4.9AI score0.00415EPSS
SaveExploits0References8
OSV
OSV
added 2024/01/30 5:15 p.m.13 views

CVE-2023-46231

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on...

7.2CVSS5.8AI score0.00478EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/30 5:15 p.m.40 views

CVE-2023-46231

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on...

7.2CVSS6.7AI score0.00478EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/30 5:15 p.m.25 views

CVE-2023-46230

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

8.2CVSS8AI score0.00388EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/30 5:15 p.m.9 views

CVE-2023-46230

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

4.9CVSS5.8AI score0.00388EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/30 5:15 p.m.31 views

Design/Logic Flaw

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on...

5.8CVSS7.1AI score0.00478EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/30 5:15 p.m.29 views

Information disclosure

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

3.3CVSS6.7AI score0.00388EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/30 5:00 p.m.144 views

CVE-2023-46230

Summary: CVE-2023-46230 affects Splunk Add-on Builder prior to 4.1.4. The issue stems from improper log handling, causing the app to write sensitive information to internal log files and potentially disclose session tokens. Impact (as stated): Information disclosure affecting confidentiality with...

8.2CVSS4.9AI score0.00388EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/30 5:00 p.m.9 views

CVE-2023-46230 Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

8.2CVSS8.2AI score0.00388EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/30 5:00 p.m.37 views

CVE-2023-46230 Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files...

8.2CVSS8.2AI score0.00388EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/30 5:00 p.m.14 views

CVE-2023-46231 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on...

6.8CVSS6.8AI score0.00478EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/30 5:00 p.m.150 views

CVE-2023-46231

CVE-2023-46231 affects Splunk Add-on Builder versions below 4.1.4. The issue arises from incorrect handling of log output, causing the application to write user session tokens to internal log files when you visit the Add-on Builder or when you build/edit a custom app or add-on. Documented impact ...

7.2CVSS6.9AI score0.00478EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/30 5:00 p.m.46 views

CVE-2023-46231 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on...

6.8CVSS7.1AI score0.00478EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/30 1:15 p.m.9 views

CVE-2024-1031

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The...

6.1CVSS3.8AI score0.00435EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/30 1:15 p.m.23 views

Cross site scripting

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The...

4CVSS6.6AI score0.00435EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/01/30 12:00 a.m.9 views

Expense Management System 跨站脚本漏洞

Expense Management System is an expense management system. A cross-site scripting vulnerability exists in Expense Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter item of templates/5-Add-Expenses.php in the compone...

6.1CVSS6.3AI score0.00435EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/30 12:00 a.m.19 views

PT-2024-1642 · Splunk · Splunk Add-On Builder

Name of the Vulnerable Software and Affected Versions: Splunk Add-on Builder versions prior to 4.1.4 Description: The issue is related to improper handling of log output, allowing a remote attacker to write arbitrary information to internal log files. This can lead to the exposure of sensitive...

8.2CVSS7AI score0.00388EPSS
SaveExploits0References8
Rows per page
Query Builder