Lucene search
+L

7 matches found

OSV
OSV
•added 2025/04/27 4:15 p.m.•16 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

6.1CVSS5.8AI score0.00325EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•14 views

Karaz Karazal 安全漏洞

Karaz Karazal is an innovative digital platform from Karaz that provides intelligent business solutions and services. A security vulnerability exists in Karaz Karazal version 2025-04-14 and earlier, which stems from a parameter lang leading to reflective cross-site scripting...

7.2CVSS6.2AI score0.00325EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/04/27 12:00 a.m.•14 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS6.7AI score0.00325EPSS
SaveExploits2References1
CVE
CVE
•added 2025/04/27 12:00 a.m.•91 views

CVE-2025-46657

Karaz Karazal (through 2025-04-14) is affected by a reflected XSS vulnerability in the lang parameter to the default URI. The public documentation identifies the vulnerable component as Karaz Karazal and the issue arises from insufficient input neutralization during page generation. Severity vari...

7.2CVSS5.9AI score0.00325EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/27 12:00 a.m.•15 views

PT-2025-18004 · Unknown · Karaz Karazal

Name of the Vulnerable Software and Affected Versions: Karaz Karazal through 2025-04-14 Description: The issue allows reflected XSS via the lang parameter to the default URI. This can lead to improper neutralization of input during web page generation, also known as cross-site scripting...

7.2CVSS5.3AI score0.00325EPSS
SaveExploits2References11
Cvelist
Cvelist
•added 2025/04/27 12:00 a.m.•31 views

CVE-2025-46657

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS0.00325EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/27 12:00 a.m.•6 views

CVE-2025-46657: Improper Neutralization of Input During Web Page Generation

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI...

7.2CVSS5.8AI score0.00325EPSS
SaveExploits2References1
Rows per page
Query Builder