Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-1005

Malware in sbrugna...

6.1CVSS6.7AI score0.00985EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2021/05/13 10:31 p.m.60 views

Reflected Cross-site Scripting (XSS) in ACS Commons

ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content...

6.1CVSS2.6AI score0.00985EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2021/05/13 10:31 p.m.26 views

GHSA-7R83-W6R8-FH6W Reflected Cross-site Scripting (XSS) in ACS Commons

ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content...

6.1CVSS6.5AI score0.00985EPSS
Exploits0References5
CNVD
CNVD
added 2021/02/04 12:0 a.m.9 views

Adobe ACS Commons Cross-Site Scripting Vulnerability

Adobe Acs-aem-commons is a Java-based codebase for AEM/CQ code collections generated according to AEM by Adobe in the United States. A security vulnerability exists in Adobe ACS Commons that stems from a failure to properly handle invalid JCR characters, which can be exploited by an attacker to...

6.1CVSS6.8AI score0.00985EPSS
Exploits0References1
Veracode
Veracode
added 2021/02/03 6:55 a.m.28 views

Cross-Site Scripting (XSS)

acs-aem-commons-ui.apps is vulnerable to Cross-Site Scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser due to insecure handling of invalid JCR characters...

6.1CVSS5.4AI score0.00985EPSS
Exploits0References2Affected Software1
Veracode
Veracode
added 2021/02/03 5:21 a.m.53 views

Cross-Site Scripting (XSS)

acs-aem-commons is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser due to insecure handling of invalid JCR characters...

8.8CVSS5.4AI score0.22983EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/02 10:29 p.m.20 views

CVE-2021-21043 Reflected Cross-site Scripting (XSS) on version-compare and page-compare tools

ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content...

6.1CVSS6.2AI score0.00985EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2021/02/02 3:46 p.m.58 views

Reflected Cross-site Scripting in ACS Commons

Impact ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript...

8.8CVSS1.2AI score0.22983EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2021/02/02 3:46 p.m.28 views

GHSA-F92J-QF46-P6VM Reflected Cross-site Scripting in ACS Commons

Impact ACS Commons version 4.9.2 and earlier suffers from a Reflected Cross-site Scripting XSS vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript...

8.8CVSS6.7AI score0.22983EPSS
Exploits0References4
Rows per page
Query Builder