Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2023/08/14 7:53 p.m.•21 views

CVE-2023-40024 Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint

ScanCode.io is a server to script and automate software composition analysis pipelines. In the /license/ endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting XSS vulnerability when attempting to access a detailed license vie...

5.4CVSS6.1AI score0.00506EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/14 7:53 p.m.•44 views

CVE-2023-40024 Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint

ScanCode.io is a server to script and automate software composition analysis pipelines. In the /license/ endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting XSS vulnerability when attempting to access a detailed license vie...

5.4CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/07 12:00 a.m.•3 views

CVE-2001-0147: Undefined Security Weakness

Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records...

10CVSS6.3AI score0.06245EPSS
SaveExploits0References1
Rows per page
Query Builder