Lucene search
K

176 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2002-1621

Malware in sbrugna...

6.8CVSS6.4AI score0.0152EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2003-1097

Malware in sbrugna...

5.1CVSS6.4AI score0.07373EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-1171

Malware in sbrugna...

7.5CVSS6.4AI score0.07461EPSS
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/11 5:55 a.m.2 views

Malicious code in react-dhtml (npm)

The package react-dhtml was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c2b33a2e3c84be9d92e70579aa195f1b65c374a13657a8ff8ba8c8a817fc24 Any computer that has this package installed or running should be considered fully...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/09/11 5:55 a.m.1 views

MAL-2025-47083 Malicious code in react-dhtml (npm)

The package react-dhtml was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c2b33a2e3c84be9d92e70579aa195f1b65c374a13657a8ff8ba8c8a817fc24 Any computer that has this package installed or running should be considered fully...

6.9AI score
Exploits0References1
Snyk
Snyk
added 2025/09/11 5:55 a.m.1 views

Malicious Package

Overview react-dhtml is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS6.8AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/21 6:5 p.m.4 views

CVE-1999-0487

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files...

2.6CVSS7.1AI score0.22672EPSS
Exploits0References1
Prion
Prion
added 2023/02/14 4:15 a.m.13 views

Design/Logic Flaw

In SAP BusinessObjects Business Intelligence Web Intelligence user interface - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On...

4.9CVSS5.2AI score0.00333EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/02/14 12:0 a.m.26 views

SAP BusinessObjects Business Intelligence Platform XSS (3263863)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It is, therefore, affected by a cross-site scripting XSS vulnerability. In SAP BusinessObjects Business Intelligence Web Intelligence user interfac...

5.4CVSS5.4AI score0.00333EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/01/23 12:0 a.m.31 views

SAP BusinessObjects Business Intelligence Platform XSS (3251447)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P11. It is, therefore, affected by a vulnerability. In SAP BusinessObjects Business Intelligence Platform Web Intelligence user interface - version 420, some calls return jso...

5.4CVSS5.8AI score0.00434EPSS
Exploits0References3
CNVD
CNVD
added 2023/01/12 12:0 a.m.24 views

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2023-03049)

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

5.4CVSS5.2AI score0.00434EPSS
Exploits0References1
NVD
NVD
added 2023/01/10 4:15 a.m.12 views

CVE-2023-0015

In SAP BusinessObjects Business Intelligence Platform Web Intelligence user interface - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS...

5.4CVSS4.7AI score0.00434EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/01/10 3:5 a.m.20 views

CVE-2023-0015 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)

In SAP BusinessObjects Business Intelligence Platform Web Intelligence user interface - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS...

4.6CVSS5.5AI score0.00434EPSS
Exploits0References2
OSV
OSV
added 2018/10/09 1:29 p.m.0 views

CVE-2018-2472

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2018/10/09 1:29 p.m.15 views

Cross site scripting

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

4.3CVSS6AI score0.00418EPSS
Exploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2018/08/06 12:7 p.m.10 views

studiosport.fr XSS vulnerability

Open Bug Bounty ID: OBB-659472 Description| Value ---|--- Affected Website:| studiosport.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Microsoft KB
Microsoft KB
added 2018/04/17 12:0 a.m.182 views

MS09-046: Vulnerability in the DHTML Editing Component ActiveX control could allow remote code execution

MS09-046: Vulnerability in the DHTML Editing Component ActiveX control could allow remote code execution INTRODUCTION Microsoft has released security bulletin MS09-046. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home users:...

6.5AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2015/03/26 12:0 a.m.2 views

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

5.1CVSS7.4AI score0.72325EPSS
Exploits5
Check Point Advisories
Check Point Advisories
added 2015/03/26 12:0 a.m.2 views

Internet Explorer DHTML Object Memory Corruption (MS05-020) - Ver2 (CVE-2005-0553)

The Microsoft Internet Explorer application is primarily used for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, etc. This application has a built in functionality to interpret JavaScript and VBScript code. It is also capable of using the Document...

5.1CVSS7.4AI score0.72325EPSS
Exploits5
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

Microsoft Internet Explorer 5.0.1 DHTML Object Race Condition Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13120/info A vulnerability in Microsoft Internet Explorer may allow remote attackers to execute arbitrary code in the context of users visiting malicious Web sites. This issue presents itself the affected application...

7.1AI score
Exploits0
Rows per page
Query Builder