Lucene search
K

315 matches found

OpenVAS
OpenVAS
added 2024/09/10 12:0 a.m.7 views

Fedora: Security Advisory (FEDORA-2023-6c030b3c71)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References3
OpenVAS
OpenVAS
added 2024/09/10 12:0 a.m.11 views

Fedora: Security Advisory (FEDORA-2024-0396ef82cd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01523EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2024/08/27 3:28 p.m.257 views

Exploit for Code Injection in Geoserver

GeoExplorer GeoExplorer is a mass scanner project consisting...

9.8CVSS9.7AI score0.99813EPSS
Exploits25
Veracode
Veracode
added 2024/08/27 7:12 a.m.10 views

Cross Site Scripting

fastapi-admin is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation and sanitization of the Product Name parameter in the Create Product function, which allows attackers to inject and execute arbitrary web scripts or HTML...

6.1CVSS6.5AI score0.0027EPSS
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/08/26 6:33 p.m.22 views

FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.7AI score0.0027EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/08/26 6:33 p.m.15 views

FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.7AI score0.0027EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/08/26 6:33 p.m.12 views

GHSA-GRQX-R2Q2-J425 FastAPI Admin Cross-site Scripting vulnerability in the Config-Create function

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.9AI score0.0027EPSS
Exploits0References4
OSV
OSV
added 2024/08/26 6:33 p.m.13 views

GHSA-22XM-W7R2-834Q FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.9AI score0.0027EPSS
Exploits0References4
OSV
OSV
added 2024/08/26 4:15 p.m.2 views

CVE-2024-42818

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.9AI score0.0027EPSS
Exploits0References2
OSV
OSV
added 2024/08/26 4:15 p.m.2 views

CVE-2024-42816

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS5.9AI score0.0027EPSS
Exploits0References2
NVD
NVD
added 2024/08/26 4:15 p.m.29 views

CVE-2024-42816

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS0.0027EPSS
Exploits0References2
NVD
NVD
added 2024/08/26 4:15 p.m.11 views

CVE-2024-42818

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS0.0027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/26 12:0 a.m.12 views

CVE-2024-42818

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

5.8AI score0.0027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/26 12:0 a.m.16 views

CVE-2024-42816

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

5.8AI score0.0027EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.3 views

FastAPI Admin 安全漏洞

FastAPI Admin is FastAPI Admin open source a fast administration dashboard based on FastAPI and TortoiseORM. A security vulnerability exists in FastAPI Admin version v0.1.4, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web...

6.1CVSS5.5AI score0.0027EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.2 views

FastAPI Admin 安全漏洞

FastAPI Admin is FastAPI Admin open source a fast administration dashboard based on FastAPI and TortoiseORM. A security vulnerability exists in FastAPI Admin version v0.1.4, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web...

6.1CVSS5.5AI score0.0027EPSS
Exploits0References3
CVE
CVE
added 2024/08/26 12:0 a.m.49 views

CVE-2024-42818

CVE-2024-42818 is a cross-site scripting (XSS) vulnerability in the Config-Create function of fastapi-admin pro v0.1.4, allowing injection of arbitrary scripts/HTML via the Product Name parameter. Multiple connected sources corroborate the issue and its scope. Public data do not specify a confirm...

6.1CVSS5.8AI score0.0027EPSS
Exploits0References2
CVE
CVE
added 2024/08/26 12:0 a.m.49 views

CVE-2024-42816

The CVE-2024-42816 issue affects fastapi-admin pro v0.1.4, where the Create Product function is vulnerable to Cross‑Site Scripting (XSS) through a crafted payload in the Product Name parameter. Multiple sources (NVD, Red Hat, Veracode, GHSA) describe that insufficient validation/sanitization of P...

6.1CVSS5.6AI score0.0027EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/26 12:0 a.m.28 views

CVE-2024-42818

A cross-site scripting XSS vulnerability in the Config-Create function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

0.0027EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/26 12:0 a.m.34 views

CVE-2024-42816

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

0.0027EPSS
Exploits0References2
Rows per page
Query Builder