Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-34182

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00479EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-4110

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.00387EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2025/05/23 7:58 a.m.6 views

CVE-2024-33859

An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting Field" Web UI, leading to XSS...

6.1CVSS6.9AI score0.00514EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/02/25 5:49 p.m.15 views

Solid Lacks Escaping of HTML in JSX Fragments allows for Cross-Site Scripting (XSS)

Inserts/JSX expressions inside illegal inlined JSX fragments lacked escaping, allowing user input to be rendered as HTML when put directly inside JSX fragments. For instance, ?text= would trigger XSS here. js const text = createResource = return new...

7.3CVSS5.8AI score0.00096EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/02/21 9:12 p.m.16 views

CVE-2025-27109 Lack of Escaping of HTML in JSX Fragments allows for Cross-site Scripting in solid-js

solid-js is a declarative, efficient, and flexible JavaScript library for building user interfaces. In affected versions Inserts/JSX expressions inside illegal inlined JSX fragments lacked escaping, allowing user input to be rendered as HTML when put directly inside JSX fragments. This issue has...

7.3CVSS0.00096EPSS
Exploits0References2
OSV
OSV
added 2022/05/24 5:29 p.m.3 views

GHSA-H8QX-MJ6V-2934 MediaWiki Cross-site Scripting (XSS) vulnerability

An issue was discovered in MediaWiki before 1.31.9 and 1.32.x through 1.34.x before 1.34.3. The non-jqueryMsg version of mw.message.parse doesn't escape HTML. This affects both message contents which are generally safe and the parameters which can be based on user input. When jqueryMsg is loaded,...

6.1CVSS6.7AI score0.00387EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2022/01/28 10:0 p.m.3 views

CVE-2022-23598 Reflected XSS vulnerability when rendering error messages in laminas-form

laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messages via the formElementErrors view helper shipped with laminas-form, many messages will contain the submitted value. However, in laminas-form prior to version 3.1.1, the value wa...

6.1CVSS6AI score0.00335EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2008/07/07 11:41 p.m.0 views

CVE-2008-2808

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting XSS attacks or have unspecified other impact via a crafted filename...

4.3CVSS5.4AI score0.02079EPSS
Exploits1References45
Rows per page
Query Builder