Lucene search
+L

7778 matches found

Prion
Prion
added 2023/10/03 4:15 p.m.21 views

Design/Logic Flaw

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page description parameters within the administration panel...

4.3CVSS5AI score0.00401EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/03 3:20 p.m.31 views

CVE-2023-3196 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page description parameters within the administration panel...

4.7CVSS5.2AI score0.00401EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/03 3:20 p.m.11 views

CVE-2023-3196 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page description parameters within the administration panel...

4.7CVSS6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/10/03 3:20 p.m.20 views

CVE-2023-3196 Multiple vulnerabilities in Canopsis of Capensis

This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page description parameters within the administration panel...

4.7CVSS6.9AI score0.00401EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/03 3:20 p.m.69 views

CVE-2023-3196

Canopsis (Capensis) suffers a stored cross-site scripting (XSS) vulnerability in the admin panel, where a attacker could inject malicious JavaScript via the login footer and login page description parameters. Connected sources consistently describe this as a stored XSS in the login/user-facing pa...

4.8CVSS4.7AI score0.00401EPSS
SaveExploits0References3Affected Software1
Citrix
Citrix
added 2023/10/02 12:00 a.m.18 views

WEM - All Organizational Units under Active Directory Objects are not listed

In some customer environment all OUs Organizational Unit may not be listed in WEM Administration Console - Active Directory Objects - Machines - Add OU. However, administrator can manually add computer objects without any issue...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/09/28 3:15 p.m.5 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS6.3AI score0.00486EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/09/28 3:15 p.m.5 views

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

5.4CVSS6.3AI score0.00488EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/28 3:15 p.m.28 views

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

5.4CVSS5.7AI score0.00488EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/28 3:15 p.m.19 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS5.1AI score0.00486EPSS
SaveExploits1References1
Prion
Prion
added 2023/09/28 3:15 p.m.35 views

Cross site scripting

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.3CVSS5.2AI score0.00486EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/09/28 12:00 a.m.10 views

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in Global Content Blocks in the Administration Menu via a specially crafted payload...

4.8CVSS6.8AI score0.00486EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/09/28 12:00 a.m.15 views

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

6.8AI score0.00488EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/09/28 12:00 a.m.32 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

5.4AI score0.00486EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/09/28 12:00 a.m.15 views

PT-2023-29023 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: Rite CMS version 3.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu. This is a result of Multiple Cross-Site scripting XSS vulnerabilities...

5.4CVSS5.3AI score0.00488EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/09/28 12:00 a.m.19 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

6.3AI score0.00486EPSS
SaveExploits1References1
CVE
CVE
added 2023/09/28 12:00 a.m.137 views

CVE-2023-43878

CVE-2023-43878 affects Rite CMS 3.0. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code via a crafted payload in the Administration Menu’s Main Menu Items. The root cause is an XSS vulnerability in the Main Menu Items handling within Rite CMS ...

5.4CVSS5.7AI score0.00488EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/09/28 12:00 a.m.35 views

CVE-2023-43878

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu...

5.9AI score0.00488EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:18 p.m.7 views

CVE-2023-35071

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...

9.8CVSS7.4AI score0.00556EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/27 3:18 p.m.9 views

CVE-2023-35071

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection.This issue affects Logging Administration Panel: before 20230915...

9.8CVSS5.8AI score0.00556EPSS
SaveExploits0References1
Rows per page
Query Builder