Lucene search
+L

9 matches found

Veracode
Veracode
•added 2024/04/15 8:53 a.m.•45 views

Cross Site Scripting (XSS)

Summernote is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitization of the codeview parameter, which can result in the the execution of arbitrary JavaScript code via a crafted payload...

7.6CVSS7.5AI score0.00663EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/04/11 12:30 a.m.•22 views

GHSA-4WH3-3WF2-39M9 Summernote vulnerable to cross-site scripting

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

6.1CVSS7.6AI score0.00663EPSS
SaveExploits1References4
Mend
Mend
•added 2024/04/10 12:00 a.m.•11 views

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

7.6CVSS7.6AI score0.00663EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/04/10 12:00 a.m.•16 views

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

7.6AI score0.00663EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•11 views

CVE-2024-29504: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

7.6CVSS7.6AI score0.00663EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/10 12:00 a.m.•26 views

PT-2024-22929 · Unknown · Summernote

Name of the Vulnerable Software and Affected Versions: Summernote versions 0.8.18 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the codeview parameter. This enables the attacker to perform actions such as executing arbitrary code on...

7.6CVSS7.8AI score0.00663EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2020/07/20 12:00 a.m.•41 views

openSUSE Security Update : nasm (openSUSE-2020-952)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...

7.8CVSS6.5AI score0.04504EPSS
SaveExploits14References27
Tenable Nessus
Tenable Nessus
•added 2020/07/20 12:00 a.m.•46 views

openSUSE Security Update : nasm (openSUSE-2020-954)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...

7.8CVSS6.5AI score0.04504EPSS
SaveExploits14References27
Tenable Nessus
Tenable Nessus
•added 2020/07/09 12:00 a.m.•44 views

SUSE SLED15 / SLES15 Security Update : nasm (SUSE-SU-2020:1843-1)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...

7.8CVSS6.6AI score0.04504EPSS
SaveExploits14References41
Rows per page
Query Builder