GHSA-9GJ2-PH57-56F5 MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the page info, or the page name in a 2 AttachFile, 3 RenamePage, or 4 LocalSiteMap action...

PT-2022-2690

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description The issue is related to the CURLOPT CERTINFO option in libcurl, which allows applications to request details about a server's certificate chain. Due to an erroneous function, a malicious serv...

CVE-2022-29414

Multiple 13x Cross-Site Request Forgery CSRF vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin mass update settings, manage subscriptions add a new subscription, update subscription, delete Subscription...

CVE-2022-29414

Multiple 13x Cross-Site Request Forgery CSRF vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin mass update settings, manage subscriptions add a new subscription, update subscription, delete Subscription...

DEBIAN-CVE-2022-1114

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service...

CVE-2022-29414

Multiple 13x Cross-Site Request Forgery CSRF vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin mass update settings, manage subscriptions add a new subscription, update subscription, delete Subscription...

Cisco Adaptive Security Appliance和Firepower Threat Defense信息泄露漏洞

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...

CVE-2022-29414: Cross-Site Request Forgery (CSRF)

Multiple 13x Cross-Site Request Forgery CSRF vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin mass update settings, manage subscriptions add a new subscription, update subscription, delete Subscription...

hamburg.branchen-info.net Cross Site Scripting vulnerability OBB-2566953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28448

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...

Cross site scripting

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...

CVE-2022-28448

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...

CVE-2022-28448

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...

CVE-2022-28448

nopCommerce 4.50.1 is vulnerable to Cross-Site Scripting (XSS): an attacker with a customer role can inject JavaScript through the First name or Last name fields in Customer Info. The root cause is reflected input without HTML encoding. Several sources (CVE-2022-28448 listings) describe this vuln...

CVE-2022-28448

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...

PT-2022-19035

Name of the Vulnerable Software and Affected Versions nopCommerce version 4.50.1 Description The issue allows an attacker, with the role of a customer, to inject JavaScript code into the First name or Last name fields at Customer Info, enabling Cross Site Scripting XSS attacks. Recommendations Fo...

PT-2022-2402

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Description The issue is related to a use after free vulnerability in the Browser Switcher extension, which can lead to heap corruption. This can be exploited by a remote attacker who convinces a...

CVE-2022-28448: Improper Neutralization of Input During Web Page Generation

nopCommerce 4.50.1 is vulnerable to Cross Site Scripting XSS. An attacker role customer can inject javascript code to First name or Last name at Customer Info...