Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-0123

Malicious code in bioql PyPI...

6.1CVSS4.6AI score0.00289EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 9:17 a.m.5 views

CVE-2019-25095

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS6.2AI score0.00289EPSS
Exploits0References1
CNVD
CNVD
added 2023/01/13 12:0 a.m.15 views

LdapCherry Cross-Site Scripting Vulnerability

LdapCherry is a nice and simple application for managing users and groups in multiple directory services. A cross-site scripting vulnerability exists in LdapCherry versions prior to 1.0.0, which stems from a problem with an unknown feature of the component URL Handler that can lead to cross-site...

6.1CVSS5.8AI score0.00289EPSS
Exploits0References1
Veracode
Veracode
added 2023/01/11 10:21 a.m.13 views

Cross-site Scripting (XSS)

ldapcherry is vulnerable to cross-site scripting. The vulnerability exists in init.py due to a lack of validation in the URL handler component which allows an attacker to inject and execute malicious JavaScript...

6.1CVSS5.9AI score0.00289EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/01/05 9:30 a.m.16 views

GHSA-VQ8W-X8V7-F88M LdapCherry Cross-site Scripting vulnerbaility

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS5.9AI score0.00289EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2023/01/05 9:30 a.m.25 views

LdapCherry Cross-site Scripting vulnerbaility

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS2.4AI score0.00289EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2023/01/05 8:15 a.m.14 views

CVE-2019-25095

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS6AI score
Exploits0References5
NVD
NVD
added 2023/01/05 8:15 a.m.6 views

CVE-2019-25095

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS4.4AI score0.00289EPSS
Exploits0References5
Prion
Prion
added 2023/01/05 8:15 a.m.11 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

5.8CVSS6AI score0.00289EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/01/05 8:15 a.m.6 views

PYSEC-2023-19

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS6AI score0.00289EPSS
Exploits0References5
PyPA
PyPA
added 2023/01/05 8:15 a.m.5 views

PYSEC-2023-19

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

6.1CVSS6AI score0.00289EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2023/01/05 7:44 a.m.17 views

CVE-2019-25095 kakwa LdapCherry URL cross site scripting

A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.0 is able to address...

4CVSS6AI score0.00289EPSS
Exploits0References5
CVE
CVE
added 2023/01/05 7:44 a.m.59 views

CVE-2019-25095

CVE-2019-25095 affects kakwa LdapCherry prior to 1.0.0. The vulnerability is a Cross-Site Scripting flaw stemming from an unknown function in the component URL Handler, enabling remote attack. Upgrading to version 1.0.0 addresses the issue (patch SHA 6f98076281e9452fdb1adcd1bcbb70a6f968ade9). Ven...

6.1CVSS4.7AI score0.00289EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/05 12:0 a.m.2 views

PT-2023-11353 · Unknown · Ldapcherry

Name of the Vulnerable Software and Affected Versions: kakwa LdapCherry versions up to 0.x Description: A problematic issue was found in the URL Handler component, leading to cross site scripting. The attack can be launched remotely, affecting an unknown function. Recommendations: For versions up...

6.1CVSS6.6AI score0.00289EPSS
Exploits0References11
CNNVD
CNNVD
added 2023/01/05 12:0 a.m.0 views

LdapCherry 跨站脚本漏洞

LdapCherry is a nice and simple application for managing users and groups in multiple directory services. A cross-site scripting vulnerability exists in LdapCherry versions prior to 1.0.0, which stems from a problem with an unknown feature of the component URL Handler that can lead to cross-site...

6.1CVSS5.9AI score0.00289EPSS
Exploits0References6
Rows per page
Query Builder