69 matches found
grails-javamelody-sample-app
Grails Javamelody Sample App Grails sample application using the Javamelody plugin version 1.44 to illustrate the CVE-2013-4378 vulnerability...
cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.59.0) +2 more potentially affected by CVE-2016-20102 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.59.0)
net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.59.0 Source cves: CVE-2016-20102 Source advisory: SNYK:JAVA-NETBULLJAVAMELODY-21691500...
Cross-site Scripting (XSS)
Overview net.bull.javamelody:javamelody-core is a JavaEE application monitoring module. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the graph parameter in the /monitoring endpoint. An attacker can execute arbitrary JavaScript in a victim's browser by supplying...
CVE-2016-20102
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
CVE-2016-20102
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
EUVD-2016-10919
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.59.0) +2 more potentially affected by CVE-2016-20102 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.59.0)
net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.59.0 Source cves: CVE-2016-20102 Source advisory: MEND:CVE-2016-20102...
CVE-2016-20102
JavaMelody versions prior to 1.60.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability. An unauthenticated attacker can inject malicious scripts by providing crafted values in the graph parameter of the /monitoring?part=graph endpoint. The root cause is that the graph value is...
CVE-2016-20102 JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
CVE-2016-20102 JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
CVE-2016-20102
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
VulnCheck KEV: CVE-2016-20102
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
CVE-2016-20102: Improper Neutralization of Input During Web Page Generation
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only...
PT-2026-118685
Name of the Vulnerable Software and Affected Versions JavaMelody versions prior to 1.60.0 Description A reflected cross-site scripting issue allows unauthenticated attackers to inject scripts into victims' browsers. This occurs when crafted values are supplied to the graph parameter of the...
JavaMelody Monitoring Exposed Detection
JavaMelody is a tool used to monitor Java or Java EE applications in QA and production environments. JavaMelody was detected on this web application. One option in the dashboard is to "View http sessions". This can be used by an attacker to steal a user's session. !/usr/bin/env python3 -- coding:...
JavaMelody - Cross-Site Scripting Detection
JavaMelody contains a cross-site scripting vulnerability via the monitoring parameter. An attacker can execute arbitrary script in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 --...
EUVD-2022-4676
Malicious code in bioql PyPI...
EUVD-2022-3901
Malicious code in bioql PyPI...
CVE-2013-4378
Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...
au.com.mountain-pass:hyperstate (>=1, <=3), cc.catalysts.boot:cat-boot-cluster (>=0.0.10, <=0.1.14) +196 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.3.2.release)
org.springframework.boot:spring-boot MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =0.0.5, =0.0.5, =0.1.8, =0.0.10,...