Lucene search
+L

56 matches found

osv_cve
osv_cve
•added 2025/03/24 9:15 a.m.•19 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS3.7AI score0.0039EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/24 8:31 a.m.•30 views

CVE-2025-2700 michelson Dante Editor Insert Link cross site scripting

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.1CVSS0.0039EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/24 8:31 a.m.•73 views

CVE-2025-2700

CVE-2025-2700 affects michelson Dante Editor up to 0.4.4, specifically the Insert Link Handler. The issue is a cross-site scripting vulnerability exploitable remotely; exploitation has been disclosed publicly, and the vendor was contacted but did not respond. No concrete remediation or affected v...

5.4CVSS6.2AI score0.0039EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/24 8:31 a.m.•8 views

CVE-2025-2700 michelson Dante Editor Insert Link cross site scripting

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.1CVSS6.2AI score0.0039EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/24 8:31 a.m.•6 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS0.0039EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•19 views

Dante code injection vulnerability

Dante is an application by the individual developer Miguel Michelson Martinez. A code injection vulnerability exists in Dante version 0.4.4 and earlier, which stems from a cross-site scripting attack that could lead to a remote attack...

5.4CVSS4.9AI score0.0039EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•8 views

CVE-2025-2700: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS3.6AI score0.0039EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•4 views

PT-2025-12551

Name of the Vulnerable Software and Affected Versions michelson Dante Editor versions up to 0.4.4 Description A problematic issue has been discovered, affecting an unknown part of the Insert Link Handler component. This leads to cross-site scripting and can be initiated remotely. The issue has be...

5.4CVSS0.0039EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
•added 2025/02/26 12:00 a.m.•6 views

Dante Discovery Detection (Windows)

Binary data dantediscoverywininstalled.nbin...

7.3AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/02/18 12:00 a.m.•10 views

openSUSE Security Advisory (openSUSE-SU-2025:0030-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.1AI score0.00523EPSS
SaveExploits0References3
CISA KEV Catalog
CISA KEV Catalog
•added 2025/02/06 12:00 a.m.•94 views

Dante Discovery Process Control Vulnerability

Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code...

7.8CVSS7.3AI score0.08329EPSS
SaveIn wildExploits0
osv_opensuse
osv_opensuse
•added 2025/01/23 7:01 p.m.•11 views

OPENSUSE-SU-2025:0030-1 Security update for dante

This update for dante fixes the following issues: - Update to version 1.4.4 Fixed incorrect access control for some sockd.conf configurations involving socksmethod boo1234688, CVE-2024-54662...

9.1CVSS9.4AI score0.00523EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2025/01/23 12:00 a.m.•14 views

Security update for dante (moderate)

openSUSE Security Update: Security update for dante Announcement ID: openSUSE-SU-2025:0030-1 Rating: moderate References: 1234688 Cross-References: CVE-2024-54662 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for...

9.1CVSS7.8AI score0.00523EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/12/19 3:49 a.m.•10 views

SUSE CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

7.4CVSS7AI score0.00523EPSS
SaveExploits0References5
NVD
NVD
•added 2024/12/17 6:15 p.m.•82 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS0.00523EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/17 6:15 p.m.•30 views

CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.3AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2024/12/17 6:15 p.m.•4 views

DEBIAN-CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.2AI score0.00523EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/17 6:15 p.m.•23 views

UBUNTU-CVE-2024-54662

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.8AI score0.00523EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•5 views

CVE-2024-54662: Incorrect Authorization

Dante 1.4.0 through 1.4.3 fixed in 1.4.4 has incorrect access control for some sockd.conf configurations involving socksmethod...

9.1CVSS5.7AI score0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/17 12:00 a.m.•20 views

Inferno Nettverk Dante security vulnerability

Inferno Nettverk Dante is a free SOCKS server from Inferno Nettverk. A security vulnerability exists in Inferno Nettverk Dante versions 1.4.0 through 1.4.3 that stems from incorrect access control for some configurations...

9.1CVSS6.5AI score0.00523EPSS
SaveExploits0References3
Rows per page
Query Builder