EUVD-2024-41843

Malicious code in bioql PyPI...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2024-31994

Name of the Vulnerable Software and Affected Versions iq3xcite versions 2.31 through 3.05 Description A cross-site scripting XSS issue in the "/test/" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For versions 2.31 through 3.05, conside...

CVE-2024-46453: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Trend IQ3xcite security vulnerabilities

Trend Micro Trend IQ3xcite is a building management system controller from Trend Micro that uses Ethernet and TCP/IP networking technologies. A security vulnerability exists in Trend IQ3xcite versions v2.31 through v3.05 that stems from vulnerability to a cross-site scripting attack that allows a...

CVE-2024-46453

The CVE-2024-46453 entry describes a cross-site scripting (XSS) vulnerability in iq3xcite, affecting versions 2.31 to 3.05 with the vulnerable entry point at the /test/ component. The vulnerability allows an attacker to run arbitrary web scripts/HTML via a crafted payload and is rated at CVSS v3....