Cross site scripting

An issue was discovered in ebankIT before 7. Document Object Model based XSS exists within the /Security/Transactions/Transactions.aspx endpoint. Users can supply their own JavaScript within the ctl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArray POST parameter that will be...

ebankIT 6 Cross Site Scripting

CVE-2023-30454 Description An issue was discovered in ebankIT before version 7. Document Object Model based XSS exists within the /Security/Transactions/Transactions.aspx endpoint. Users can supply their own JavaScript within the...

CVE-2023-30454

CVE-2023-30454 affects ebankIT before version 7, with a DOM-based XSS at the endpoint /Security/Transactions/Transactions.aspx . An attacker can supply JavaScript in the POST parameter ctl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArray , which is passed to an internal eval...

ebankIT 跨站脚本漏洞

ebankIT is a banking software from ebankIT Portugal. A cross-site scripting vulnerability exists in versions prior to ebankIT 7. The vulnerability stems from the presence of a cross-site scripting XSS vulnerability based on the Document Object Model...

CVE-2023-2343

Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...

Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...

CVE-2023-2343 Cross-site Scripting (XSS) - DOM in pimcore/pimcore

Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...

CVE-2023-2343

CVE-2023-2343 is a DOM-based Cross-site Scripting (XSS) vulnerability in pimcore/pimcore prior to version 10.5.21. Multiple connected sources confirm the affected component and version, with remediation guidance directing users to upgrade to 10.5.21 or apply the provided patch (f1d904094700b513c4...

CVE-2023-2343 Cross-site Scripting (XSS) - DOM in pimcore/pimcore

Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...

CVE-2023-2343 Cross-site Scripting (XSS) - DOM in pimcore/pimcore

Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...

Cross site scripting

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

CVE-2023-29442

Zoho ManageEngine Applications Manager is affected by CVE-2023-29442: a proxy.html DOM XSS in versions prior to 16400. The underlying issue is a DOM-based cross-site scripting vulnerability in the proxy.html file, enabling script execution within the application's context. There is no explicit ex...

CVE-2023-29442

Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS...

Denial Of Services (DoS)

Google Chrome is vulnerable to Denial Of Services DoS. The vulnerability exists due to the out of bounds memory access in DOM Bindings, which allows an attacker to perform out of bounds memory access via a crafted HTML page, leading to an application crash...

[SECURITY] Fedora 37 Update: libxml2-2.10.4-1.fc37

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

CVE-2023-2109

Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0...

Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0...

CVE-2023-2109 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot

Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0...

CVE-2023-2109

CVE-2023-2109 describes a DOM-based XSS in the chatwoot/chatwoot project prior to version 2.14.0. Multiple connected sources corroborate the issue as a cross-site scripting vulnerability in the Chatwoot dashboard/chat UI, arising from unsanitized user-supplied data being inserted into the DOM (fo...