Lucene search
+L

6420 matches found

Cvelist
Cvelist
•added 2023/08/07 4:51 p.m.•48 views

CVE-2023-38045 Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements...

6.2AI score0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/07 12:00 a.m.•19 views

Admiror Gallery Cross-Site Scripting Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Admiror Gallery that originates from improper input neutralization during page generation...

6.1CVSS6.8AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/05 12:00 a.m.•4 views

CVE-2023-4189: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

4.8CVSS5.5AI score0.00473EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2023/07/27 12:00 a.m.•27 views

SolarWinds Platform 2023.2.0 < 2023.3 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20233 advisory. - Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to...

7.2CVSS6.6AI score0.0321EPSS
SaveExploits0References12
NVD
NVD
•added 2023/07/26 3:15 p.m.•32 views

CVE-2023-33229

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

3.5CVSS4.4AI score0.00772EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/26 3:15 p.m.•33 views

Input validation

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

3.5CVSS4.2AI score0.00772EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/07/26 2:22 p.m.•32 views

CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

3.5CVSS5.2AI score0.00772EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/07/26 2:22 p.m.•21 views

CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

3.5CVSS6.9AI score0.00772EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/26 12:00 a.m.•21 views

PT-2023-24234 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML, due to incorrect input neutralization...

3.5CVSS3.9AI score0.00772EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/26 12:00 a.m.•9 views

CVE-2023-33229: Improper Control of Generation of Code

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML...

3.5CVSS5.7AI score0.00772EPSS
SaveExploits0References3
NVD
NVD
•added 2023/07/25 4:15 p.m.•49 views

CVE-2023-38435

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS6AI score0.02247EPSS
SaveExploits0References3
Prion
Prion
•added 2023/07/25 4:15 p.m.•26 views

Cross site scripting

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

5.8CVSS5.9AI score0.02247EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/07/25 2:15 p.m.•15 views

CVE-2023-36502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

6.1CVSS7.3AI score0.00406EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/25 2:15 p.m.•29 views

CVE-2023-36502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cththemes Balkon plugin = 1.3.2 versions...

7.1CVSS6.9AI score0.00406EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/17 2:15 p.m.•14 views

CVE-2023-2960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS.This issue affects Oliva Expertise EKS: before 1.2...

6.1CVSS5.8AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/17 2:15 p.m.•28 views

CVE-2023-2960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...

6.1CVSS0.0036EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/07/17 2:15 p.m.•8 views

CVE-2023-2960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...

6.1CVSS6.4AI score0.0036EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/17 12:00 a.m.•29 views

PT-2023-22330

Name of the Vulnerable Software and Affected Versions Oliva Expertise EKS versions prior to 1.2 Description The issue affects Oliva Expertise EKS, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations For versions prior to 1.2, updat...

6.1CVSS6.4AI score0.0036EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/14 12:00 a.m.•2 views

CVE-2023-24896: Improper Neutralization of Input During Web Page Generation

Dynamics 365 Finance Spoofing Vulnerability...

5.4CVSS6AI score0.0068EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/13 8:15 a.m.•23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14...

4.9CVSS5.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder