Lucene search
+L

6882 matches found

CNVD
CNVD
•added 2021/03/25 12:00 a.m.•21 views

Bitweaver Cross-Site Scripting Vulnerability (CNVD-2021-22576)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/index.php URI...

4.8CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/25 12:00 a.m.•21 views

Bitweaver Cross-Site Scripting Vulnerability (CNVD-2021-22580)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/usersimport.php URI...

4.8CVSS6.1AI score0.00862EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/25 12:00 a.m.•22 views

Bitweaver Cross-Site Scripting Vulnerability (CNVD-2021-22581)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/preferences.php URI...

4.8CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/25 12:00 a.m.•53 views

Bitweaver cross-site scripting vulnerability (CNVD-2021-22575)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/permissions.php URI...

4.8CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•23 views

Nokia NetAct 18A Cross-Site Scripting Vulnerability

Nokia NetAct 18A is an application system from NOKIA, Finland. It provides best-in-class applications for seamless day-to-day network operations, including configuration management, monitoring and software management. A security vulnerability exists in Nokia NetAct 18A that allows an attacker to...

5.4CVSS5.6AI score0.00737EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•18 views

CVE-2021-29029

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...

4.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•23 views

CVE-2021-29032

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI...

4.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•28 views

CVE-2021-29033

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/editgroup.php URI...

4.8CVSS5.8AI score0.00755EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•21 views

CVE-2021-29026

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI...

4.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•20 views

CVE-2021-29030

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...

4.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/03/24 1:15 p.m.•23 views

CVE-2021-29025

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/myimages.php URI...

4.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
Prion
Prion
•added 2021/03/24 1:15 p.m.•32 views

Cross site scripting

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/editgroup.php URI...

3.5CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/03/24 1:15 p.m.•8 views

CVE-2021-29028

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/useractivity.php URI...

4.8CVSS5AI score0.00786EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/03/24 1:15 p.m.•16 views

CVE-2021-29032

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI...

4.8CVSS5AI score0.00786EPSS
SaveExploits1References2
Prion
Prion
•added 2021/03/24 1:15 p.m.•30 views

Cross site scripting

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/usersimport.php URI...

3.5CVSS4.9AI score0.00862EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/03/24 1:15 p.m.•25 views

Cross site scripting

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

3.5CVSS4.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/03/24 12:03 p.m.•37 views

CVE-2021-29029

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...

5.2AI score0.00786EPSS
SaveExploits1References1
CVE
CVE
•added 2021/03/24 12:03 p.m.•67 views

CVE-2021-29029

Bitweaver 3.1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript through the /users/edit_personal_page.php URI. Root cause is unrelated input handling in that page, per multiple CVE references. Impact is variable depending on context but ...

4.8CVSS4.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/03/24 12:03 p.m.•68 views

CVE-2021-29027

CVE-2021-29027 describes a cross-site scripting (XSS) vulnerability in Bitweaver v3.1.0 , where an attacker can inject JavaScript via the /users/index.php URI. The connected documents confirm Bitweaver 3.1.0 is affected and show no explicit details on the root cause, exploit conditions, or availa...

4.8CVSS4.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/03/24 12:03 p.m.•28 views

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

5.2AI score0.00786EPSS
SaveExploits1References1
Rows per page
Query Builder