Lucene search
+L

4517 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/11 12:00 a.m.•4 views

CVE-2024-22717: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

6.1CVSS6.3AI score0.0037EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/11 12:00 a.m.•20 views

PT-2024-19536 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the First Name field in the application. This enables attackers to execute malicious scripts on the client-side, potentially...

6.1CVSS6.7AI score0.0037EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/11 12:00 a.m.•16 views

Form Tools security vulnerabilities

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.5AI score0.0037EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/04/10 2:15 a.m.•28 views

CVE-2024-3532

A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendanceview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack...

6.1CVSS3.6AI score0.00641EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/10 12:00 a.m.•25 views

Student Management System Cross-site Scripting Vulnerabilities

Student Management System is a simple web-based student management software. A cross-site scripting vulnerability exists in Student Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the FirstRecord parameter of the unitsview.php...

6.1CVSS5.6AI score0.00667EPSS
SaveExploits1References5
The Hacker News
The Hacker News
•added 2024/04/09 5:30 a.m.•27 views

Embracing the Cloud: Revolutionizing Privileged Access Management with One Identity Cloud PAM Essentials

As cyber threats loom around every corner and privileged accounts become prime targets, the significance of implementing a robust Privileged Access Management PAM solution can't be overstated. With organizations increasingly migrating to cloud environments, the PAM Solution Market is experiencing...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•25 views

PT-2024-26418 · Unknown · Campcodes Complete Online Student Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown part of the file students view.php. The manipulation of the FirstRecord argument leads to...

6.1CVSS4.5AI score0.00641EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•23 views

PT-2024-26431 · Campcodes · Campcodes Complete Online Student Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A problematic vulnerability has been found in the attendance view.php file, where the manipulation of the FirstRecord argument leads to cross-site scripting. This...

6.1CVSS4.7AI score0.00641EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•26 views

PT-2024-26414 · Unknown · Campcodes Complete Online Student Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file units view.php. The manipulation of the...

6.1CVSS4.3AI score0.00667EPSS
SaveExploits1References8
osv_ubuntu
osv_ubuntu
•added 2024/04/07 9:15 p.m.•40 views

UBUNTU-CVE-2024-31950

In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA packets during an attempt to read Segment Routing subTLVs their size is not validated...

6.5CVSS6.7AI score0.00509EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/03/28 7:15 p.m.•23 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS6.9AI score0.00661EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2024/03/28 7:15 p.m.•15 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00661EPSS
SaveExploits1References5
NVD
NVD
•added 2024/03/28 7:15 p.m.•31 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00661EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•11 views

CVE-2024-31064: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

6.1CVSS7AI score0.00661EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•21 views

Insurance Management System security vulnerabilities

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the First Name field...

6.1CVSS5.5AI score0.00661EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/03/28 12:00 a.m.•49 views

CVE-2024-31064

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field...

7.2AI score0.00661EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•28 views

PT-2024-23744

Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...

6.1CVSS6.8AI score0.00661EPSS
SaveExploits1References10
CVE
CVE
•added 2024/03/28 12:00 a.m.•100 views

CVE-2024-31064

The Insurance Management System (v.1.0.0 and before) is susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw occurs because the application fails to properly neutralize input in the First Name field, allowing a remote attacker to execute arbitrary code. To minimize the risk of exp...

6.1CVSS6.9AI score0.00661EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•25 views

Progress Software Telerik Report Server Code Issue Vulnerability

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software. A security vulnerability exists in Progress Software Telerik Report Server 2024 Q1 10.0.24.130 and prior versions that originated from a vulnerability that allows an...

8.8CVSS7.8AI score0.01129EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/20 12:00 a.m.•16 views

PT-2024-3249 · Progress · Progress Telerik Reporting

Name of the Vulnerable Software and Affected Versions: Progress Telerik Reporting versions prior to 2024 Q1 18.0.24.130 Description: The issue is related to an insecure deserialization vulnerability in the ObjectReader class of Progress Telerik Reporting, which can be exploited by a remote threat...

8.8CVSS8.3AI score0.01129EPSS
SaveExploits0References8
Rows per page
Query Builder