Lucene search
K

6 matches found

EUVD
EUVD
added 2025/11/13 3:23 a.m.1 views

EUVD-2025-176933

Malicious code in public-process-wind-debug-view npm...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2019/05/31 12:0 a.m.17 views

Joomla! < 3.9.6 XSS Vulnerability

This VT has been deprecated due to the CVE already being covered by another script SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

6.1CVSS6.3AI score0.00276EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2018/07/18 12:5 p.m.6 views

umka.in.ua XSS vulnerability

Open Bug Bounty ID: OBB-649427 Description| Value ---|--- Affected Website:| umka.in.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
ArchLinux
ArchLinux
added 2016/07/22 12:0 a.m.45 views

python2-django: cross-site scripting

Unsafe usage of JavaScript's Element.innerHTML could result in XSS in the admin's add/change related popup. Element.textContent is now used to prevent execution of the data. The debug view also used innerHTML. Although a security issue wasn't identified there, out of an abundance of caution it's...

4.3CVSS0.8AI score0.16367EPSS
Exploits6References3
Tenable Nessus
Tenable Nessus
added 2016/07/22 12:0 a.m.34 views

Debian DLA-555-1 : python-django security update

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin's add/change related popup and debug view. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.5-1+deb7u17. We recommend that you upgrade yo...

6.1CVSS6.7AI score0.16367EPSS
Exploits6References3
ArchLinux
ArchLinux
added 2016/07/22 12:0 a.m.37 views

python-django: cross-site scripting

Unsafe usage of JavaScript's Element.innerHTML could result in XSS in the admin's add/change related popup. Element.textContent is now used to prevent execution of the data. The debug view also used innerHTML. Although a security issue wasn't identified there, out of an abundance of caution it's...

4.3CVSS0.8AI score0.16367EPSS
Exploits6References3
Rows per page
Query Builder