Lucene search
+L

7 matches found

NVD
NVD
•added 2023/12/08 3:15 p.m.•37 views

CVE-2023-6146

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...

5.7CVSS0.00421EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/08 3:15 p.m.•15 views

CVE-2023-6146

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...

5.4CVSS5.8AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/08 2:21 p.m.•34 views

CVE-2023-6146 Stored XSS Vulnerability in QualysGuard VM/PC

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...

5.7CVSS5.3AI score0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/08 2:21 p.m.•13 views

CVE-2023-6146 Stored XSS Vulnerability in QualysGuard VM/PC

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...

5.7CVSS5.5AI score0.00421EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•2 views

CVE-2023-6146: Improper Neutralization of Input During Web Page Generation

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details...

5.7CVSS5.9AI score0.00421EPSS
SaveExploits0References3
Hacker One
Hacker One
•added 2023/08/11 3:51 p.m.•15 views

Mozilla: CSRF to Information disclosure on password reset

The vulnerability allowed an attacker to obtain the victim's IP address and browser details by tricking the victim into clicking on a malicious password reset link. The vulnerability was caused by a cross-site request forgery CSRF in the password reset functionality...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/08/16 12:00 a.m.•38 views

webridge application suite gives up too much error information on Internal Server Error

Hi. I accidently come across this error yesterday. Im not sure what to class it as but it sure is a bug of some kind. This occurred because I tried to view some pages on the site and forgot to remove the trailing slash so it had // at the end of the URL. Still it should not give up this informati...

SaveExploits0
Rows per page
Query Builder