79 matches found
CVE-2019-7349
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitorV4LCapturesPerFrame' parameter value in the view monitor monitor.php because proper filtration is omitted...
CVE-2019-7173
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...
CVE-2019-7340
POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterQueryterms0val' parameter value in the view filter filter.php because proper filtration is omitted...
CVE-2019-7342
POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filterAutoExecuteCmd' parameter value in the view filter filter.php because proper filtration is omitted...
CVE-2019-7171
A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/edit/8...
EUVD-2019-16887
Malware in sbrugna...
EUVD-2019-16888
Malware in sbrugna...
EUVD-2019-16883
Malware in sbrugna...
EUVD-2020-14759
Malware in sbrugna...
EUVD-2017-15542
Malware in sbrugna...
EUVD-2019-16878
Malware in sbrugna...
EUVD-2017-5889
Malware in sbrugna...
EUVD-2020-20873
Malware in sbrugna...
EUVD-2019-13344
Malware in sbrugna...
EUVD-2017-15540
Malware in sbrugna...
EUVD-2023-46639
Malicious code in bioql PyPI...
EUVD-2025-23868
Malicious code in bioql PyPI...
EUVD-2024-44047
Malicious code in bioql PyPI...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
CVE-2023-42180
An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...