Lucene search
+L

5499 matches found

Cvelist
Cvelist
•added 2021/12/16 1:15 p.m.•38 views

CVE-2021-4124 Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.1CVSS6.4AI score0.00938EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/16 8:15 a.m.•23 views

CVE-2021-4121

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS0.00764EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•1 views

PT-2021-23139

Name of the Vulnerable Software and Affected Versions yetiforcecrm affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user...

6.6CVSS0.00471EPSS
SaveExploits1References7
NVD
NVD
•added 2021/12/14 8:15 p.m.•27 views

CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS0.0079EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/12/14 8:10 p.m.•31 views

CVE-2021-4108 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS6.4AI score0.0079EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/14 11:15 a.m.•25 views

CVE-2021-3831

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.1CVSS0.01841EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•5 views

CVE-2021-39910: Improper Neutralization of Input During Web Page Generation

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab was vulnerable to HTML Injection through the Swagger UI feature...

4.3CVSS5.7AI score0.00987EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/11 11:30 p.m.•1 views

CVE-2021-4097

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...

6.3CVSS0.00871EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/09 11:15 a.m.•9 views

CVE-2021-3817

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS7.3AI score0.38418EPSS
SaveExploits4References4
Prion
Prion
•added 2021/12/09 11:15 a.m.•37 views

Command injection

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

7.5CVSS9.7AI score0.38418EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
•added 2021/12/09 10:50 a.m.•61 views

CVE-2021-3817 SQL Injection in wbce/wbce_cms

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS10AI score0.38418EPSS
SaveExploits4References3
attackerkb
attackerkb
•added 2021/12/08 11:15 a.m.•8 views

CVE-2021-36180

Multiple improper neutralization of special elements used in a command vulnerabilities CWE-77 in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests...

8.8CVSS6.1AI score0.01154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/08 12:00 a.m.•2 views

PT-2021-23054

Name of the Vulnerable Software and Affected Versions Fortinet FortiWLM versions 8.6.1 and below Description The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an attacker to store malicious JavaScript code in t...

6.4CVSS0.00532EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•3 views

CVE-2021-43469: Improper Neutralization of Special Elements used in a Command

VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...

8.8CVSS6AI score0.02383EPSS
SaveExploits1References2
Mend
Mend
•added 2021/12/01 11:15 a.m.•2 views

CVE-2021-3983

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.3CVSS0.0079EPSS
SaveExploits1References5
NVD
NVD
•added 2021/12/01 11:15 a.m.•43 views

CVE-2021-3994

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9.6CVSS0.01399EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/01 11:15 a.m.•15 views

CVE-2021-3985

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9CVSS6.7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2021/12/01 11:05 a.m.•41 views

CVE-2021-3985 Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2

kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8CVSS9.3AI score0.01257EPSS
SaveExploits1References2
Mend
Mend
•added 2021/12/01 10:40 a.m.•1 views

CVE-2021-3994

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

9.6CVSS0.01399EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2021/12/01 12:00 a.m.•3 views

PT-2021-22707

Name of the Vulnerable Software and Affected Versions: kimai2 affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user input,...

6.3CVSS0.0079EPSS
SaveExploits1References8
Rows per page
Query Builder