Lucene search
K

868 matches found

CNVD
CNVD
added 2021/07/26 12:0 a.m.11 views

NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55885)

NCH Axon PBX is a set of virtual telephone switch software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems fro...

5.4CVSS3.1AI score0.00206EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/26 12:0 a.m.18 views

NCH Axon PBX Cross-Site Scripting Vulnerability (CNVD-2021-55887)

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the failure of the product's outbound dialing plan to properly filter incoming data for special characters, which can be...

5.4CVSS3.2AI score0.00185EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/26 12:0 a.m.13 views

NCH IVM Attendant Cross-Site Scripting Vulnerability

NCH IVM Attendant is an application of nch. A cross-site scripting vulnerability exists in NCH IVM Attendant, which stems from the product's Mailbox name failing to properly filter incoming data for special characters, and could be exploited by attackers to execute client-side code...

5.4CVSS4.4AI score0.00206EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.1 views

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from a cross-site scripting vulnerability that stems from...

5.4CVSS5.6AI score0.0023EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...

5.4CVSS5.3AI score0.00206EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH IVM Attendant 跨站脚本漏洞

NCH IVM Attendant is an application of nch. A cross-site scripting vulnerability exists in NCH IVM Attendant, which stems from the product's Mailbox name failing to properly filter incoming data for special characters, and could be exploited by attackers to execute client-side code...

5.4CVSS5.3AI score0.00206EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems...

5.4CVSS5.3AI score0.00185EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the failure of the product's outbound dialing plan to properly filter incoming data for special characters, which can be...

5.4CVSS5.3AI score0.00185EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in business environments. The software is primarily used to manage telephone call centers and implements the functionality of a telephone switch in software.A cross-site scripting vulnerability exists in NCH Axon PBX, which stems fro...

5.4CVSS5.3AI score0.00206EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.1 views

NCH Axon PBX 跨站脚本漏洞

NCH Axon PBX is a set of virtual telephone switch software used in commercial environments. A cross-site scripting vulnerability exists in NCH Axon PBX, which stems from the failure of the product's extension name to properly filter special characters in input data, and can be exploited to execut...

5.4CVSS5.3AI score0.00185EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.2 views

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers.A cross-site request forgery vulnerability exists in the WooCommerce Stock Manager WordPress plugin,...

8.8CVSS5.7AI score0.00109EPSS
Exploits2References4
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.1 views

Aruba Instant 跨站脚本漏洞

Aruba Instant is a wireless network from Aruba USA. provides the only Wi-Fi solution that is easy to set up. A cross-site scripting vulnerability exists in Aruba Instant Access Point IAP, which stems from a WEB application that lacks proper validation of client data. An attacker could exploit the...

6.1CVSS6.1AI score0.00285EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/07/14 12:0 a.m.2 views

UMeditor 跨站脚本漏洞

UMeditor is an editor application. A security vulnerability exists in umeditor, which stems from a cross-site scripting XSS vulnerability in umeditor v1.2.3. An attacker can exploit the vulnerability to execute client-side code...

6.1CVSS5.4AI score0.00216EPSS
Exploits1References2
CNVD
CNVD
added 2021/07/14 12:0 a.m.16 views

IBM Cloud Pak for Applications Cross-Site Scripting Vulnerability (CNVD-2022-05117)

IBM Cloud Pak for Applications is an application from IBM, Inc. A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications, which stems from the product's lack of validation of user-side data and could be exploited to execute client-side code and potentially expose credentials ...

7.5CVSS3.3AI score0.00214EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/14 12:0 a.m.1 views

Booking Core 跨站脚本漏洞

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS...

5.4CVSS5.4AI score0.00185EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/14 12:0 a.m.17 views

IBM Cloud Pak for Applications Cross-Site Scripting Vulnerability (CNVD-2022-05118)

IBM Cloud Pak for Applications is an application from IBM USA, Inc. A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications, which stems from the product's lack of validation of user-side data, and could be exploited by an attacker to execute client-side code and potentially...

5.4CVSS3.6AI score0.00164EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/13 12:0 a.m.6 views

Arcgis Server Services Stored Cross-Site Scripting Vulnerability

Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A stored cross-site scripting vulnerability exists in the Arcgis Server Services Directory, which arises from the platform not validating user...

5.4CVSS6.2AI score0.00148EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/13 12:0 a.m.7 views

Kaseya VSA Cross-Site Scripting Vulnerability

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A cross-site scripting vulnerability exists in Kaseya VSA, which can be exploited by an attacker to execute client-sid...

5.4CVSS6.3AI score0.0016EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/11 12:0 a.m.1 views

Esri Arcgis Server 跨站脚本漏洞

Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A stored cross-site scripting vulnerability exists in the Arcgis Server Services Directory, which arises from the platform not validating user...

5.4CVSS5.6AI score0.00148EPSS
Exploits0References3
CNVD
CNVD
added 2021/07/09 12:0 a.m.7 views

PbootCMS Cross-Site Scripting Vulnerability

PbootCMS is an open source enterprise building content management system CMS using PHP language developed by PbootCMS individual developers. PbootCMS suffers from a cross-site scripting vulnerability that stems from the product's admin.php page not properly validating client-side data. An attacke...

4.8CVSS6.3AI score0.00363EPSS
Exploits1
Rows per page
Query Builder