Lucene search
K

16 matches found

EUVD
EUVD
added 2026/05/20 7:36 p.m.5 views

EUVD-2026-31182

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patientJF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a JavaScript variable assignment. Attackers...

5.1CVSS5.8AI score0.00029EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/20 7:36 p.m.22 views

CVE-2026-35010 Open ISES Tickets < 3.44.2 Reflected XSS via patient_JF.php ticket_id Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patientJF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a JavaScript variable assignment. Attackers...

5.1CVSS0.00029EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/20 7:36 p.m.2 views

CVE-2026-35010

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patientJF.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the ticketid GET parameter directly into a JavaScript variable assignment. Attackers...

5.1CVSS5.8AI score0.00029EPSS
Exploits0References4
CVE
CVE
added 2026/05/20 7:36 p.m.4 views

CVE-2026-35010

Open ISES Tickets before 3.44.2 is affected by a reflected XSS in patient_JF.php via the ticket_id GET parameter, where an unsanitized value leads to arbitrary JavaScript execution in an authenticated user’s browser. The issue is triggered by visiting a crafted URL containing a JavaScript payload...

5.1CVSS5.8AI score0.00029EPSS
Exploits0References3
OSV
OSV
added 2025/04/01 5:3 p.m.6 views

USN-7392-3 linux-aws vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

7.8CVSS6.7AI score0.02038EPSS
Exploits1References155
Openbugbounty
Openbugbounty
added 2023/12/20 4:56 p.m.6 views

jf-drums.de Improper Access Control vulnerability OBB-3819162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/05/04 9:9 a.m.6 views

jf-ramalde.pt Cross Site Scripting vulnerability OBB-3292471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/01/03 4:51 p.m.10 views

jf-drying.com Cross Site Scripting vulnerability OBB-2321183

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/09/21 4:59 p.m.29 views

jf-it.net Cross Site Scripting vulnerability OBB-1353848

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/09/11 8:46 a.m.7 views

jf-neckartenzlingen.de Cross Site Scripting vulnerability OBB-1323939

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/07/31 7:59 a.m.12 views

jf-toner.cn Cross Site Scripting vulnerability OBB-1243986

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2019/12/23 6:56 p.m.8 views

jf-covadapiedade.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048840 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting jf-covadapiedade.pt...

Exploits0
Openbugbounty
Openbugbounty
added 2019/12/23 6:56 p.m.7 views

jf-pragal.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1048841 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting jf-pragal.pt website and...

Exploits0
Openbugbounty
Openbugbounty
added 2016/08/03 8:58 p.m.10 views

jf-beira.pt XSS vulnerability

Vulnerable URL: http://www.jf-beira.pt/galeriafotoslist.asp?cat=estacao" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

6.3AI score
Exploits0
Packet Storm
Packet Storm
added 2010/08/28 12:0 a.m.30 views

iGaming CMS 1.5 SQL Injection

Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hight Description : iGaming CMS is a...

0.2AI score
Exploits0
seebug.org
seebug.org
added 2007/07/21 12:0 a.m.49 views

Lotus Domino IMAP4 Server 6.5.4 Remote Buffer Overflow Exploit

No description provided by source. Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino = 7.0.2 && 6.5.5 FP2 tested 6.5.4 Authors: Dominic Chell [email protected] & prdelka Exploitation steps:...

7.1AI score
Exploits0
Rows per page
Query Builder