Lucene search
+L

118 matches found

Cvelist
Cvelist
•added 2021/09/17 6:15 a.m.•39 views

CVE-2021-3812 Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.6AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/17 6:15 a.m.•67 views

CVE-2021-3812

CVE-2021-3812 affects the Pi-hole Web Interface (AdminLTE) component. The vulnerability is a Cross-site Scripting (XSS) issue caused by improper neutralization of input during web page generation, with multiple sources indicating a reflected XSS in pi-hole/adminlte. Impact is described as potenti...

6.7CVSS6.8AI score0.0055EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/09/17 6:15 a.m.•0 views

CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.4CVSS0.0055EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/09/17 6:15 a.m.•41 views

CVE-2021-3811 Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS6.6AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/17 6:15 a.m.•77 views

CVE-2021-3811

CVE-2021-3811 affects Pi-hole’s AdminLTE (the Pi-hole web interface). The vulnerability is an XSS in the adminlte component caused by improper neutralization of input during web page generation. The documented impact is a reflected Cross-site Scripting vulnerability exposed via a POST parameter (...

6.7CVSS6.8AI score0.0055EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/09/17 6:15 a.m.•0 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.4CVSS0.0055EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/09/17 12:00 a.m.•18 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/09/17 12:00 a.m.•3 views

PT-2021-21955

Name of the Vulnerable Software and Affected Versions: adminlte affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly validate user input,...

6.7CVSS0.0055EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/09/17 12:00 a.m.•3 views

PT-2021-21951

Name of the Vulnerable Software and Affected Versions: adminlte affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly validate user input,...

6.7CVSS0.0055EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/17 12:00 a.m.•7 views

CVE-2021-3812: Improper Neutralization of Input During Web Page Generation

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS5.8AI score0.0055EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/17 12:00 a.m.•4 views

CVE-2021-3811: Improper Neutralization of Input During Web Page Generation

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.7CVSS5.8AI score0.0055EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/09/17 12:00 a.m.•18 views

Pi-Hole Adminlte 跨站脚本漏洞

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...

6.7CVSS6.5AI score0.0055EPSS
SaveExploits1References3
NVD
NVD
•added 2021/09/15 7:15 a.m.•38 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS0.01101EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/15 7:15 a.m.•25 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS6.8AI score
SaveExploits0References2
Prion
Prion
•added 2021/09/15 7:15 a.m.•30 views

Design/Logic Flaw

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

5CVSS7.5AI score0.01101EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/09/15 7:15 a.m.•11 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS7.1AI score0.01101EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/09/15 6:30 a.m.•52 views

CVE-2021-3706 Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.4CVSS7.7AI score0.01101EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/15 6:30 a.m.•81 views

CVE-2021-3706

The CVE-2021-3706 entry affects Pi-hole’s AdminLTE-based web interface. Affected component: the adminlte/persistentlogin cookie is set without the HttpOnly flag, making the cookie accessible to JavaScript and susceptible to theft via XSS. The OpenVAS PoC documents show a login flow where the pers...

7.5CVSS7.3AI score0.01101EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/09/15 6:30 a.m.•0 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

7.5CVSS0.01101EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•18 views

PT-2021-21481 · Adminlte · Adminlte

Name of the Vulnerable Software and Affected Versions: adminlte affected versions not specified Description: The issue concerns a sensitive cookie without the 'HttpOnly' flag. This means that the cookie is accessible to JavaScript, potentially allowing an attacker to steal sensitive information...

7.5CVSS7.2AI score0.01101EPSS
SaveExploits1References6
Rows per page
Query Builder