Lucene search
+L

1352 matches found

CVE
CVE
added 2024/11/04 12:00 a.m.76 views

CVE-2024-51329

CVE-2024-51329 – Normal details available Agile-Board 1.0 is affected by a Host header injection vulnerability that can lead to leakage of a password reset token when a user interacts with a crafted password reset link. The core issue is a Host header injection flaw, enabling an attacker to manip...

8.8CVSS7.4AI score0.00564EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/04 12:00 a.m.12 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

7.4AI score0.00564EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/04 12:00 a.m.16 views

agile-board 安全漏洞

agile-board is a progressive Node.js framework by the individual developer Malik Idrees. It is used to build efficient and scalable server-side applications. A security vulnerability exists in agile-board version 1.0, which stems from a password reset token that can be obtained via Host header...

8.8CVSS7AI score0.00564EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/11/04 12:00 a.m.22 views

PT-2024-34598 · Unknown · Agile-Board

Name of the Vulnerable Software and Affected Versions: Agile-Board version 1.0 Description: A Host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This is achieved through exploiting the Host header injection...

8.8CVSS7.3AI score0.00564EPSS
SaveExploits1References6
Gitee
Gitee
added 2024/10/29 4:05 p.m.280 views

Exploit for Injection in Oracle Agile_Plm

针对 loj4j2 CVE-2021-44228 漏洞的研究 实验平台 - VirtualBox 7.0.12 r159484 Qt5.15.2 - Attacker kali - 网络地址转换(NAT) - host-only 网络 192.168.56.101 - Victim kali 2023.3 - 网络地址转换(NAT) - host-only 网络 192.168.56.112 实验任务 - - x 搭建实验平台 - - x 漏洞存在性验证 以 loj4j2 CVE-2021-44228 为例 - - x 漏洞可利用验证 以 loj4j2 CVE-2021-44228 为例...

10CVSS9.1AI score0.99999EPSS
SaveExploits405
OSV
OSV
added 2024/10/29 1:15 p.m.22 views

CVE-2024-49636

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Prashant Mavinkurve Agile Video Player Lite allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through 1.0...

6.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 1:15 p.m.39 views

CVE-2024-49636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...

7.1CVSS0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 12:49 p.m.29 views

CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...

7.1CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 12:49 p.m.72 views

CVE-2024-49636

CVE-2024-49636 concerns Agile Video Player Lite (WordPress plugin) with a Reflected XSS in versions

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/29 12:49 p.m.17 views

CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Prashant Mavinkurve Agile Video Player Lite allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through 1.0...

7.1CVSS7.2AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.13 views

WordPress plugin Agile Video Player Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 1:15 p.m.9 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

5.4CVSS5.8AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/28 1:15 p.m.20 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

5.4CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/28 12:55 p.m.50 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

4.6CVSS0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 12:55 p.m.16 views

CVE-2024-50578

In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...

4.6CVSS4.5AI score0.003EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/28 12:55 p.m.94 views

CVE-2024-50578

Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...

5.4CVSS6AI score0.003EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.12 views

PT-2024-7635 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability in the Agile Boards page of JetBrains YouTrack. This vulnerability can be exploited by an attacker to conduct cross-site scripti...

5.5CVSS5.5AI score0.003EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/10/21 7:44 a.m.10 views

WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Agile Video Player Lite versions = 1.0...

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:00 a.m.17 views

WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...

7.1CVSS6.6AI score0.00331EPSS
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.11 views

Malicious code in agile_cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder