Lucene search
+L

213 matches found

Prion
Prion
•added 2023/02/20 10:15 a.m.•28 views

Cross site scripting

A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is ab...

5.8CVSS6.5AI score0.00489EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/20 9:31 a.m.•41 views

CVE-2015-10080 NREL api-umbrella-web Admin Data Table cross site scripting

A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is ab...

4CVSS6.3AI score0.00489EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/02/20 9:31 a.m.•33 views

CVE-2015-10080 NREL api-umbrella-web Admin Data Table cross site scripting

A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is ab...

4CVSS6.1AI score0.00489EPSS
SaveExploits0References4
Mend
Mend
•added 2023/02/20 9:31 a.m.•6 views

CVE-2015-10080

A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is ab...

6.1CVSS0.00489EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/20 12:00 a.m.•5 views

CVE-2015-10080: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 0.8.0 is ab...

6.1CVSS3.9AI score0.00489EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/20 12:00 a.m.•14 views

API Umbrella Web Cross-Site Script Vulnerabilities

API Umbrella Web is an open source library from National Renewable Energy Laboratory. A cross-site scripting vulnerability exists in API Umbrella Web version 0.7.1, which stems from an issue with an unknown portion of the component Admin Data Table Handler that can lead to a cross-site scripting...

6.1CVSS4.6AI score0.00489EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 5:55 a.m.•12 views

SUSE CVE-2010-4570

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

4.3CVSS5.8AI score0.01739EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2022/10/14 7:56 a.m.•14 views

canadatabl.com Cross Site Scripting vulnerability OBB-2995286

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:18 p.m.•10 views

Malicious code in ucs-data-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aef043b7e2e9e4adfbf47216ccab67054731f441327666b3848fbe84da4bf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/06/20 8:18 p.m.•15 views

MAL-2022-6731 Malicious code in ucs-data-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aef043b7e2e9e4adfbf47216ccab67054731f441327666b3848fbe84da4bf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•25 views

WordPress Table & Contact Form 7 Database – Tablesome – Data Table & Contact Form 7 Database (CFDB7) Plugin plugin < 0.6.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Table & Contact Form 7 Database – Tablesome – Data Table & Contact Form 7 Database CFDB7 Plugin plugin versions 0.6.7. Solution Update the WordPress Table & Contact Form 7 Database – Tablesome – Data Table & Contact Form 7...

2.4AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•11 views

WordPress Table & Contact Form 7 Database – Tablesome – Data Table & Contact Form 7 Database (CFDB7) Plugin plugin < 0.6.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Table & Contact Form 7 Database – Tablesome – Data Table & Contact Form 7 Database CFDB7 Plugin plugin versions 0.6.7. Solution Update the WordPress Table & Contact Form 7 Database – Tablesome – Data...

3.9AI score
SaveExploits0References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/08/05 9:15 p.m.•19 views

UBUNTU-CVE-2021-28216

BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE...

7.8CVSS6AI score0.00423EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/09/03 4:02 a.m.•13 views

Cross-site Scripting (XSS)

md-data-table is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of the value of mdt-row...

1.8AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/01 9:24 p.m.•26 views

GHSA-HGR5-82RC-P936 Cross-Site Scripting in md-data-table

All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package to perfo...

6.4AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/01 9:24 p.m.•37 views

Cross-Site Scripting in md-data-table

All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package to perfo...

2.6AI score
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
•added 2020/09/01 9:24 p.m.•8 views

sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/01 9:24 p.m.•2 views

sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)

md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: GHSA-HGR5-82RC-P936...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•3 views

PT-2020-21341

Name of the Vulnerable Software and Affected Versions md-data-table versions affected versions not specified Description The issue concerns cross-site scripting XSS, which can be exploited if an attacker controls data rendered by mdt-row. Recommendations As a temporary workaround, consider proper...

5.6AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2020/07/07 7:20 p.m.•41 views

CVE-2020-8520

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

10AI score0.01407EPSS
SaveExploits1References3
Rows per page
Query Builder