8150 matches found
CVE-2025-62172 Home Assistant vulnerable to Stored XSS in Energy dashboard from Energy Entity Name
Home Assistant is open source home automation software that puts local control and privacy first. In versions 2025.1.0 through 2025.10.1, the energy dashboard is vulnerable to stored cross-site scripting. An authenticated user can inject malicious JavaScript code into an energy entity's name fiel...
PT-2025-41968
Name of the Vulnerable Software and Affected Versions Home Assistant versions 2025.1.0 through 2025.10.1 Description Home Assistant is home automation software that prioritizes local control and privacy. The energy dashboard is susceptible to stored cross-site scripting. An authenticated user can...
Home Assistant 安全漏洞
Home Assistant is an open source home automation management system from Home Assistant Open Source. The system is primarily used to control home automation devices. A security vulnerability exists in Home Assistant versions 2025.1.0 through 2025.10.1, which stems from entity names not being...
CVE-2025-59982
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform, related to incorrect restrictions on the path name to the restricted catalog, allows a perpetrator to increase their privileges.
The vulnerability of the Cisco Nexus Dashboard Fabric Controller NDFC network resource management platform is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
EUVD-2025-33385
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
CVE-2025-59982
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
CVE-2025-59982
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
CVE-2025-59982
CVE-2025-59982 affects Juniper Networks Junos Space prior to 24.1R4. Affected component: web page generation for the dashboard/search input. Root cause: improper input neutralization allows cross-site scripting (reflected) that can inject script tags; when visited by another user, it can execute ...
CVE-2025-59982 Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
CVE-2025-59982 Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visited by another user, enables the attacker to execute commands with the target's...
PT-2025-41418
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the dashboard search field. When another user visits the affected page, the...
EUVD-2021-11401
Malware in sbrugna...
EUVD-2020-26680
Malware in sbrugna...
EUVD-2021-14680
Malware in sbrugna...
EUVD-2021-11395
Malware in sbrugna...