Lucene search
+L

14 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-7329

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00857EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/22 8:24 a.m.•13 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"...

6.1CVSS6AI score0.00857EPSS
SaveExploits1References1
OSV
OSV
•added 2022/11/03 6:42 p.m.•55 views

GHSA-FJHH-67WV-7GR4 Reflected Cross site scripting (XSS) in kairosdb

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

6.1CVSS6AI score0.00857EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/11/03 6:42 p.m.•29 views

Reflected Cross site scripting (XSS) in kairosdb

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

6.1CVSS2.3AI score0.00857EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
•added 2019/11/18 3:47 a.m.•16 views

Cross-Site Scripting (XSS)

KairosDB is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of message is not sanitized when it is displayed when an error has occurred...

6.1CVSS1.5AI score0.00857EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2019/11/18 12:00 a.m.•17 views

KairosDB Cross-Site Scripting Vulnerability

KairosDB is a high-speed distributed scalable temporal database based on Cassandra. A cross-site scripting vulnerability exists in view.html in KairosDB 1.2.2 and earlier versions. The vulnerability stems from the showErrorMessage in js/graph.js, and can be exploited via view.html with the...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits1References1
NVD
NVD
•added 2019/11/17 9:15 p.m.•35 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

6.1CVSS6AI score0.00857EPSS
SaveExploits1References1
OSV
OSV
•added 2019/11/17 9:15 p.m.•13 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

6.1CVSS6AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2019/11/17 9:15 p.m.•8 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"...

6.1CVSS5.4AI score0.00857EPSS
SaveExploits1References2
Prion
Prion
•added 2019/11/17 9:15 p.m.•25 views

Cross site scripting

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

4.3CVSS5.9AI score0.00857EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/11/17 8:20 p.m.•37 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"' substring...

6AI score0.00857EPSS
SaveExploits1References1
CVE
CVE
•added 2019/11/17 8:20 p.m.•78 views

CVE-2019-19040

KairosDB up to 1.2.2 contains an XSS in view.html via showErrorMessage in js/graph.js, demonstrated with a payload like '"sampling":{"value":"[removed]'". This CVE (CVE-2019-19040) is corroborated across multiple sources (NVD, Red Hat, GHSA/OSV, CNVD, CNVD CNVD, etc.). Exploitation status and con...

6.1CVSS5.9AI score0.00857EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/17 12:00 a.m.•1 views

CVE-2019-19040: Improper Neutralization of Input During Web Page Generation

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"...

6.1CVSS6.3AI score0.00857EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/11/17 12:00 a.m.•16 views

PT-2019-15766 · Kairosdb · Kairosdb

Name of the Vulnerable Software and Affected Versions: KairosDB versions prior to 1.2.3 Description: The issue concerns an XSS vulnerability in the view.html file due to the showErrorMessage function in js/graph.js. This can be exploited by including a specific substring, such as...

6.1CVSS5.9AI score0.00857EPSS
SaveExploits1References6
Rows per page
Query Builder