JVN#56781258: Splunk Config Explorer vulnerable to cross-site scripting

Splunk Config Explorer provided by Chris Younger contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is using the product. Solution Update the software Update the software to the latest version according to...

PT-2024-5284 · Splunk · Splunk Config Explorer

Name of the Vulnerable Software and Affected Versions: Splunk Config Explorer versions prior to 1.7.16 Description: The issue exists due to inadequate protection of the web page structure in Splunk Config Explorer, allowing for a cross-site scripting XSS attack. If exploited, this could lead to t...

Splunk Config Explorer 安全漏洞

Splunk Config Explorer is an editor interface by Chris Younger, a personal developer. A security vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. An attacker can exploit the vulnerability to execute arbitrary scripts on a web browser...

PT-2024-34794 · Eclipse · Eclipse Ditto

Name of the Vulnerable Software and Affected Versions: Eclipse Ditto versions 3.0.0 through 3.5.5 Description: The user input of several input fields of the Eclipse Ditto Explorer User Interface was not properly neutralized, making it vulnerable to both Reflected and Stored XSS Cross Site...

PT-2024-40096 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Silverstripe versions prior to a fixed version affected versions not specified Description: The issue affects Internet Explorer browsers, where requests do not encode all entities in the URL string. As a result, when rewriting hashlinks,...

May 14, 2024—KB5037781 (OS Build 25398.887)

None None...

Cross-site Scripting (XSS)

tribalsystems/zenario is vulnerable to Cross-site Scripting XSS via the Tree Explorer tool. An attacker can inject malicious scripts that can be executed in the context of the user's browser by crafting malicious input...

CVE-2023-42757

Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...

Microsoft Process Explorer 安全漏洞

Microsoft Process Explorer is a process explorer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Process Explorer versions prior to 17.04, which stems from a wcscats error handling issue, that allows an attacker to render its functionality unavailable by renaming an...

CVE-2023-42757

Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...

CVE-2023-42757

CVE-2023-42757 affects Microsoft Process Explorer versions prior to 17.04. The issue lets an unprivileged user trigger a DoS by renaming an executable to a 255-character extensionless name and launching it via NtCreateUserProcess, due to a wcscat_s error handling flaw. This can render the process...

PT-2024-13055 · Microsoft · Process Explorer

Name of the Vulnerable Software and Affected Versions: Process Explorer versions prior to 17.04 Description: The issue allows attackers to make Process Explorer functionally unavailable, resulting in a denial of service for analysis. This can be achieved by renaming an executable file to a new...

CVE-2023-42757

Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...

VulnCheck KEV: CVE-2016-3212

The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted web site, aka "Internet Explorer XSS Filter Vulnerability."...

GHSA-7QWJ-GCJF-828F Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...

PT-2024-25914 · Zenario · Zenario

Name of the Vulnerable Software and Affected Versions: Zenario versions prior to 9.5.60602 Description: The Tree Explorer tool from Organizer in Zenario is affected by a cross-site scripting XSS issue. This component was removed in version 9.5.60602. Recommendations: For versions prior to...

CVE-2024-34460

The Tree Explorer tool from Organizer in Zenario before 9.5.60602 is affected by XSS. This component was removed in 9.5.60602...