Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2024/10/02 6:40 p.m.11 views

CVE-2024-9440 Slim Select 2.0 createOption "text" XSS

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption, the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate...

5.4CVSS6.2AI score0.00256EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/10/02 6:40 p.m.16 views

CVE-2024-9440 Slim Select 2.0 createOption "text" XSS

Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption, the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate...

5.4CVSS0.00256EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/10/02 12:0 a.m.2 views

Slim Select 安全漏洞

Slim Select is an advanced select dropdown menu by Brian Voelker Personal Developer. A security vulnerability exists in Slim Select versions 2.0 through 2.9.0, which stems from a dynamically generated list that is not cleaned of user-supplied input, and is susceptible to a cross-site scripting...

6.1CVSS6AI score0.00256EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2019/03/12 12:0 a.m.23 views

Palo Alto Networks 7.1.x < 7.1.22 / 8.0.x < 8.0.15 / 8.1.x < 8.1.6 Cross-Site Scripting Vulnerability (PAN-SA-2019-0001)

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.22 or 8.0.x prior to 8.0.15 or 8.1.x prior to 8.1.6. It is, therefore, affected by a cross-site scripting XSS vulnerability that exists in the PAN-OS external dynamic lists due to improper validation of...

5.4CVSS6.1AI score0.0032EPSS
Exploits0References2
NVD
NVD
added 2019/01/30 8:29 p.m.11 views

CVE-2019-1565

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML...

5.4CVSS5.5AI score0.0032EPSS
Exploits0References2
Palo Alto Networks
Palo Alto Networks
added 2019/01/23 7:15 p.m.9 views

Cross-Site Scripting (XSS) in PAN-OS External Dynamic Lists

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS External Dynamic Lists. Ref. PAN-106776; CVE-2019-1565 Successful exploitation of this issue may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject...

5.4CVSS5.8AI score0.0032EPSS
Exploits0References1
Palo Alto Networks
Palo Alto Networks
added 2019/01/23 7:15 p.m.73 views

Cross-Site Scripting (XSS) in PAN-OS External Dynamic Lists

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS External Dynamic Lists. Ref. PAN-106776; CVE-2019-1565 Successful exploitation of this issue may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject...

1.4AI score0.0032EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder