Lucene search
K

10 matches found

EUVD
EUVD
added 2026/06/19 12:31 a.m.8 views

EUVD-2026-37952

Hashgraph Guardian through 3.5.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARDREGISTRY role to inject malicious scripts by submitting a crafted companyName value via the branding configuration API endpoint. Attacke...

4.8CVSS5.4AI score0.00177EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/18 9:8 p.m.7 views

CVE-2026-22674

Hashgraph Guardian through 3.6.0, fixed in commit ba8c566, contains a stored cross-site scripting vulnerability that allows authenticated users with the STANDARDREGISTRY role to inject malicious scripts by submitting a crafted companyName value via the branding configuration API endpoint. Attacke...

4.8CVSS6AI score0.00177EPSS
Exploits0References4
CVE
CVE
added 2026/06/18 9:8 p.m.19 views

CVE-2026-22674

Hashgraph Guardian prior to 3.5.0 is affected by a stored XSS vulnerability in the branding configuration API endpoint. The issue arises from unsanitized innerHTML in the branding service, allowing an authenticated user with the STANDARD_REGISTRY role to inject malicious scripts by submitting a c...

4.8CVSS6AI score0.00177EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/18 12:0 a.m.12 views

PT-2026-50797

Name of the Vulnerable Software and Affected Versions Hashgraph Guardian versions prior to 3.5.0 commit ba8c566 Description A stored cross-site scripting issue exists where authenticated users with the STANDARD REGISTRY role can inject malicious scripts. This occurs by submitting a crafted...

4.8CVSS5.9AI score0.00177EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-2581

Malware in sbrugna...

9.1CVSS9AI score0.01042EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:4 p.m.9 views

CVE-2020-10118

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

9.1CVSS6.9AI score0.01042EPSS
Exploits0References1
NVD
NVD
added 2020/03/17 3:15 p.m.11 views

CVE-2020-10118

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

9.1CVSS9.2AI score0.01042EPSS
Exploits0References1
Prion
Prion
added 2020/03/17 3:15 p.m.17 views

Design/Logic Flaw

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

6.4CVSS9AI score0.01042EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/03/17 2:38 p.m.21 views

CVE-2020-10118

cPanel before 84.0.20 allows a demo account to modify files via Branding API calls SEC-543...

9.2AI score0.01042EPSS
Exploits0References1
CVE
CVE
added 2020/03/17 2:38 p.m.71 views

CVE-2020-10118

CVE-2020-10118 affects cPanel before 84.0.20 via the Branding API, where a demo account can modify files. The Red Hat/CNVD entries corroborate the same issue (file modification via Branding API). The vulnerability is tied to cPanel’s Branding API handling, enabling unauthorized file changes with ...

9.1CVSS9AI score0.01042EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder