Lucene search
+L

6158 matches found

CNNVD
CNNVD
added 2024/09/17 12:0 a.m.9 views

Millbeck Proroute H685t-w 跨站脚本漏洞

The Millbeck Proroute H685t-w is a wireless router from Millbeck. A cross-site scripting vulnerability exists in the Millbeck Proroute H685t-w version v3.2.334, which stems from the presence of a cross-site scripting vulnerability that could allow an attacker to execute arbitrary JavaScript in th...

5.5CVSS6.2AI score0.00401EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/12 12:0 a.m.5 views

MindsDB 安全漏洞

MindsDB is an emerging low-code machine learning platform from MindsDB, Inc. MindsDB has a security vulnerability that stems from the presence of a cross-site scripting XSS vulnerability that allows JavaScript to be executed whenever a user enumerates engines, databases, projects, or datasets tha...

9CVSS5.7AI score0.00473EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2024/09/04 2:43 p.m.704 views

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js Ov...

8.8CVSS8AI score0.72648EPSS
SaveExploits16
OSV
OSV
added 2024/08/30 11:8 a.m.6 views

OESA-2024-2063 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution ...

8.4CVSS8.5AI score0.047EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/30 12:0 a.m.18 views

The vulnerability in the administration interface of the Zimbra Collaboration Suite email management system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the administration interface of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code by sending a...

5.5CVSS5.9AI score0.0028EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/08/28 8:17 p.m.51 views

CVE-2024-45057 Reflected Cross-Site Scripting in i-Educar

i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. A Reflected Cross-Site Scripting XSS vulnerability was identified in the dynamic generation of HTML fields prior to the 2.9 branch. The file located at...

6.3CVSS0.00363EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/23 9:15 p.m.10 views

CVE-2024-37392

A stored Cross-Site Scripting XSS vulnerability has been identified in SMSEagle software version 6.0. The vulnerability arises because the application did not properly sanitize user input in the SMS messages in the inbox. This could allow an attacker to inject malicious JavaScript code into an SM...

6.1CVSS5.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/23 5:15 p.m.13 views

CVE-2024-41878

Adobe Experience Manager versions 6.5.19 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to inject and execute arbitrary JavaScript code within the context of the user's browser session. Exploitation of this issue requires...

5.4CVSS6AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.10 views

PT-2024-27518 · Smseagle · Smseagle

Name of the Vulnerable Software and Affected Versions: SMSEagle versions prior to 6.0 Description: A stored Cross-Site Scripting XSS issue has been identified. The application did not properly sanitize user input in SMS messages in the inbox, allowing an attacker to inject malicious JavaScript co...

6.1CVSS6AI score0.00254EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.18 views

The vulnerability of the netshop CMS system’s Netcat module allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the netshop CMS system’s Netcat module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.7AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.14 views

The vulnerability of the pricerule parameter in the netshop CMS system, Netcat, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the pricerule parameter in the netshop CMS system, Netcat, is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.7AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.11 views

The vulnerability of the filemanager module in the CMS system Netcat, which allows a hacker to execute arbitrary JavaScript code

The vulnerability of the filemanager module in the CMS system Netcat exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.9 views

The vulnerability of the filemanager module in the CMS system Netcat, which allows a hacker to execute arbitrary JavaScript code

The vulnerability of the filemanager module in the CMS system Netcat is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute any JavaScript code in the user’s browser remotely...

9CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.9 views

The vulnerability of the code parameter in the netshop CMS system’s Netcat module allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the code parameter in the netshop CMS system’s Netcat module exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.9 views

The vulnerability of the component_id and object_id parameters of the Netcat landing CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the componentid and objectid parameters in the Netcat landing CMS system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.8 views

The vulnerability of the stats module in the Netcat CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the stats module in the Netcat CMS system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.10 views

The vulnerability of the Netcat module in CMS systems allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Netcat calendar CMS system’s module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.7AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.14 views

The vulnerability of the `promotion_discount` parameter in the Netcat Netshop CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the promotiondiscount parameter in the Netcat NetShop CMS system relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.7AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.9 views

The vulnerability of the alter_form.php function in the Netcat CMS system allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the alterform.php function in the Netcat CMS system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute any JavaScript code in the user’s browser remotely...

9CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.10 views

The vulnerability of the logging module in CMS systems like Netcat allows attackers to execute arbitrary JavaScript code.

The vulnerability of the logging module in CMS systems like Netcat exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder