Lucene search
+L

7 matches found

CNNVD
CNNVD
•added 2024/10/03 12:00 a.m.•16 views

Bandisoft BandiView 安全漏洞

Bandisoft bandiview is an image viewer and editor software from the Korean company Bandisoft. A security vulnerability exists in Bandisoft BandiView version 7.05, which stems from the vulnerability of carefully crafted POC files in sub0x3d80fc to false access control attacks...

6.5CVSS6AI score0.00461EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2020/05/07 5:15 p.m.•18 views

CVE-2020-5746

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS5.6AI score
SaveExploits0References1
Mend
Mend
•added 2020/05/07 4:08 p.m.•3 views

CVE-2020-5746

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS0.00666EPSS
SaveExploits1References1
Mend
Mend
•added 2020/05/07 4:02 p.m.•2 views

CVE-2020-5747

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS0.00666EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/05/07 4:02 p.m.•31 views

CVE-2020-5747

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.1AI score0.00666EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/05/07 12:00 a.m.•3 views

PT-2020-18668

Name of the Vulnerable Software and Affected Versions TCExam version 14.2.2 Description The issue is related to insufficient output sanitization, allowing a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks. This can be achieved by creating a crafted test...

5.4CVSS0.00666EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/07 12:00 a.m.•6 views

CVE-2020-5746: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS5.8AI score0.00666EPSS
SaveExploits1References2
Rows per page
Query Builder