EUVD-2023-12764

Malicious code in bioql PyPI...

CVE-2023-0746

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

CVE-2023-0746

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

Cross site scripting

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

CVE-2023-0746 XSS Vulnerability in GigaVue-FM

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

CVE-2023-0746 XSS Vulnerability in GigaVue-FM

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

CVE-2023-0746: Improper Neutralization of Input During Web Page Generation

The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting...

PT-2023-16498

Name of the Vulnerable Software and Affected Versions GigaVUE-FM version 5.0 202 Description The help page in GigaVUE-FM does not require an authenticated user, allowing an attacker to enforce a user into inserting malicious JavaScript code into the URI. This could lead to a Reflected Cross site...

CVE-2023-0746

The CVE-2023-0746 entry describes a Reflected Cross-Site Scripting vulnerability in Gigamon GigaVUE-FM when operating with GigaVUE-OS 5.0 202. The issue arises on the help page, where an unauthenticated user could trigger JavaScript in a URI, leading to client-side script execution. Affected prod...