Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

16134 matches found

Prion
Prion•added 2024/01/26 10:15 a.m.•43 views

Cross site scripting

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructurelist.php, in the description parameter. Exploitation of this...

5.8CVSS6AI score0.00437EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2024/01/26 9:17 a.m.•11 views

CVE-2024-23884 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter. Exploitation of this vulnerability could...

8.2CVSS6.1AI score0.00398EPSS
SaveExploits0References1
NVD
NVD•added 2024/01/26 9:15 a.m.•32 views

CVE-2024-23860

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/currencylist.php, in the description parameter. Exploitation of this vulnerability...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/01/26 9:14 a.m.•43 views

CVE-2024-23877 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/currencycreate.php, in the currencyid parameter. Exploitation of this vulnerabilit...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/01/26 9:13 a.m.•10 views

CVE-2024-23874 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/companymodify.php, in the address1 parameter. Exploitation of this vulnerability...

8.2CVSS6.1AI score0.00399EPSS
SaveExploits0References1
CVE
CVE•added 2024/01/26 9:09 a.m.•87 views

CVE-2024-23869

CVE-2024-23869 affects Cups Easy (Purchase & Inventory) v1.0, with a Cross-Site Scripting (XSS) vulnerability stemming from insufficient encoding of user-controlled input in the issuanceno parameter of /cupseasylive/stockissuanceprint.php. An attacker could entice an authenticated user to open a ...

8.2CVSS6.1AI score0.00437EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2024/01/26 9:08 a.m.•37 views

CVE-2024-23867 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/statecreate.php, in the stateid parameter. Exploitation of this vulnerability coul...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/01/26 9:07 a.m.•12 views

CVE-2024-23865 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructurelist.php, in the description parameter. Exploitation of this...

8.2CVSS6AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/01/26 9:07 a.m.•40 views

CVE-2024-23864 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/countrylist.php, in the description parameter. Exploitation of this vulnerability...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/01/26 9:06 a.m.•41 views

CVE-2024-23863 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxstructuredisplay.php, in the description parameter. Exploitation of this...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/01/26 9:04 a.m.•36 views

CVE-2024-23858 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/stockissuancelinecreate.php, in the batchno parameter. Exploitation of this...

8.2CVSS7.2AI score0.00437EPSS
SaveExploits0References1
NVD
NVD•added 2024/01/25 8:15 p.m.•41 views

CVE-2024-23817

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

7.1CVSS6.7AI score0.00557EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve•added 2024/01/25 8:15 p.m.•42 views

CVE-2024-23817

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

7.1CVSS6.7AI score0.00557EPSS
SaveExploits1References2
Prion
Prion•added 2024/01/25 8:15 p.m.•33 views

Cross site scripting

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

5.8CVSS6.8AI score0.00557EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu•added 2024/01/25 8:15 p.m.•28 views

UBUNTU-CVE-2024-23817

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

7.1CVSS6.8AI score0.00557EPSS
SaveExploits1References3
osv_cve
osv_cve•added 2024/01/25 7:42 p.m.•38 views

CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

7.1CVSS6.8AI score0.00557EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment•added 2024/01/25 7:42 p.m.•4 views

CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability

Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...

7.1CVSS6.8AI score0.00557EPSS
SaveExploits1References1
NVD
NVD•added 2024/01/25 2:15 p.m.•31 views

CVE-2024-23855

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/taxcodemodify.php, in multiple parameters. Exploitation of this vulnerability coul...

8.2CVSS7.2AI score0.00399EPSS
SaveExploits0References1
osv_usn
osv_usn•added 2024/01/25 12:38 p.m.•16 views

USN-6597-1 puma vulnerability

It was discovered that Puma incorrectly handled parsing chunked transfer encoding bodies. A remote attacker could possibly use this issue to cause Puma to consume resources, leading to a denial of service...

7.5CVSS6.6AI score0.00958EPSS
SaveExploits0References2
osv_cve
osv_cve•added 2024/01/25 11:37 a.m.•22 views

CVE-2023-6282 Cross-Site Scripting vulnerability in IceHrm

IceHrm 23.0.0.OS does not sufficiently encode user-controlled input, which creates a Cross-Site Scripting XSS vulnerability via /icehrm/app/fileuploadpage.php, in multiple parameters. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload and partially...

5.4CVSS6.4AI score
SaveExploits0References3
Rows per page
Query Builder