9 matches found
CVE-2024-47612 XSS in Special:DataDump when displaying dump status
DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped more specifically, datadump-table-column-queued, datadump-table-column-in-progress, datadump-table-column-completed, datadump-table-column-failed. If these messages are edited which requires t...
CVE-2024-34500
An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages in the $err var are not escaped before being passed to Html::rawElement in the getError function in the...
CVE-2024-34500
The UnlinkedWikibase extension in MediaWiki is vulnerable to Cross-site Scripting (XSS) in versions prior to 1.39.6 , 1.40.x before 1.40.2 , and 1.41.x before 1.41.1 . The root cause is that error messages stored in the $err variable are not properly escaped before being passed to the Html::rawEl...
CVE-2023-29110: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
The SAP Application Interface Message Dashboard - versions AIF 703, AIFX 702, S4CORE 100, 101, SAPBASIS 755, 756, SAPABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker...
CVE-2023-29112: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
The SAP Application Interface Message Monitoring - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a comment. The comment will render links and custom CSS classes as HTML objects. After successful exploitations, an attacker can cause limite...
PT-2023-22158
Name of the Vulnerable Software and Affected Versions SAP Application Interface Message Dashboard - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP BASIS 755, 756, SAP ABA 75C, 75D, 75E Description The application allows the usage of HTML tags, enabling an authorized attacker to use basic HTML...
PT-2023-22160
Name of the Vulnerable Software and Affected Versions SAP Application Interface Message Monitoring versions 600, 700 Description The issue allows an authorized attacker to input links or headings with custom CSS classes into a comment, which will render links and custom CSS classes as HTML object...
PT-2023-12796 · Qualcomm · Snapdragon +64
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a modem due to the use of an out-of-range pointer offset while processing a qmi message. No information is...
