PT-2024-24753 · Samsung · Escargot

Name of the Vulnerable Software and Affected Versions: escargot version 4.0.0 Description: The issue is related to an Improper Input Validation vulnerability in the Samsung Open Source escargot JavaScript engine, which allows Overflow Buffers. However, it is noted that this issue occurs in the te...

PT-2024-25823 · Apache · Apache Karaf Cave

Name of the Vulnerable Software and Affected Versions: Apache Karaf Cave versions all Description: The issue is related to an Improper Input Validation vulnerability. This vulnerability only affects products that are no longer supported by the maintainer. Users are recommended to find an...

PT-2024-25882 · Unknown · Corona Virus (Covid-19) Banner & Live Data

Name of the Vulnerable Software and Affected Versions: Corona Virus COVID-19 Banner & Live Data versions 1.8.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the...

CVE-2024-34566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through 3.3.0...

PT-2024-25984 · Zotpress · Zotpress

Name of the Vulnerable Software and Affected Versions: Zotpress versions through 7.3.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This can potentially affect a large number of devic...

CVE-2024-23705

In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2024-25865 · Slicewp · Slicewp

Name of the Vulnerable Software and Affected Versions: SliceWP versions 1.1.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

The vulnerability of the CommentFormatter/CommentParser.php file, a software tool used for implementing the hypertext environment in MediaWiki, allows a malicious actor to execute cross-site scripting (XSS) attacks.

The vulnerability of the CommentFormatter/CommentParser.php file, a software component used to implement the MediaWiki hypertext environment, is related to improper input neutralization during the creation of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site...

PT-2024-25841 · Unknown · Propertyhive

Name of the Vulnerable Software and Affected Versions: PropertyHive versions 2.0.10 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-25824 · Unknown · Download Alt Text Ai

Name of the Vulnerable Software and Affected Versions: Download Alt Text AI versions 1.3.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Download Alt Text AI...

CVE-2022-22364

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2023-41192

CVE-2023-41192 affects D-Link DAP-1325 (HNAP1 SOAP endpoint) with a SetAPLanSettings/PrimaryDNS input handling flaw that allows remote code execution as root. The issue stems from insufficient validation of a user-supplied string used in a system call, enabling network-adjacent attackers to execu...

CVE-2023-32170 Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability

Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. User interaction is required to exploit this...

FATEK FvDesigner 安全漏洞

FATEK FvDesigner is a hardware device from the Chinese company Yonghong Electric FATEK. It provides a human-machine interface. A security vulnerability exists in FATEK FvDesigner that stems from a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to execut...

PT-2024-25586 · Unknown · Atanas Yonkov Pliska

Name of the Vulnerable Software and Affected Versions: Atanas Yonkov Pliska versions 0.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-25587 · Unknown · Freesia Empire

Name of the Vulnerable Software and Affected Versions: Freesia Empire versions 1.4.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2024-31131 · Unknown · Mr Digital Simple Image Popup

Name of the Vulnerable Software and Affected Versions: Mr Digital Simple Image Popup versions n/a through 2.4.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

PT-2024-25584 · Unique · Unique

Name of the Vulnerable Software and Affected Versions: Unique versions 0.3.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

CVE-2024-4142 JFrog Artifactory Improper input validation within token creation flow

An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory. Due to this vulnerability, users with low privileges may gain administrative access to the system. This issue can also be exploited in Artifactory platforms with...

ASB-A-293602970

In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...