1135 matches found
PT-2025-42666
Name of the Vulnerable Software and Affected Versions MediaWiki PollNY extension versions 1.39, 1.43, and 1.44 Description The Wikimedia Foundation MediaWiki PollNY extension contains a flaw related to improper input neutralization during web page generation, potentially leading to Stored...
BIT-KIBANA-2025-25018 Kibana Stored Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting XSS...
Fortinet FortiSIEM 跨站脚本漏洞
Fortinet FortiSIEM is a security information and event management system from Fortinet, Inc. The system includes features such as asset discovery, workflow automation, and unified management. A cross-site scripting vulnerability exists in Fortinet FortiSIEM that stems from improper input...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...
CVE-2025-25017 Kibana Stored Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting XSS...
CVE-2025-25018 Kibana Stored Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting XSS...
EUVD-2025-33583
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...
CVE-2025-4615
The CVE-2025-4615 entry concerns Palo Alto Networks PAN-OS management web interface. An improper input neutralization vulnerability allows an authenticated administrator to bypass system restrictions and execute arbitrary commands. Affected PAN-OS versions are indicated in Nessus plugin reference...
BIT-ELK-2025-25009 Kibana Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A cross-site scripting vulnerability exists in Juniper Networks...
Logo Cloud 跨站脚本漏洞
Logo Cloud is a series of cloud-based services and products from Logo Turkey. A cross-site scripting vulnerability exists in Logo Cloud versions prior to 1.18 that stems from improper input neutralization and could lead to a cross-site scripting attack...
EUVD-2025-24707
Malicious code in bioql PyPI...
EUVD-2025-24735
Malicious code in bioql PyPI...
EUVD-2025-24749
Malicious code in bioql PyPI...