Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:58 a.m.7 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.8AI score0.0037EPSS
Exploits1References1
NVD
NVD
added 2023/08/29 8:15 p.m.13 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.9AI score0.0037EPSS
Exploits1References1
OSV
OSV
added 2023/08/29 8:15 p.m.1 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.9AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/08/29 8:15 p.m.4 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.9AI score0.0037EPSS
Exploits1References2
Prion
Prion
added 2023/08/29 8:15 p.m.18 views

Cross site scripting

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

5.8CVSS5.9AI score0.0037EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/29 12:0 a.m.13 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

5.8AI score0.0037EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/29 12:0 a.m.16 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6AI score0.0037EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/08/29 12:0 a.m.3 views

PT-2023-27069 · Bdcom · Bdcom Olt P3310D-2Ac

Name of the Vulnerable Software and Affected Versions: BDCOM OLT P3310D-2AC version 10.1.0F Build 69083 Description: A cross-site scripting XSS vulnerability in the device web interface, specifically the Log Query page, allows attackers to execute arbitrary web scripts or HTML via a crafted paylo...

6.1CVSS6.1AI score0.0037EPSS
Exploits1References6
CVE
CVE
added 2023/08/29 12:0 a.m.40 views

CVE-2023-39678

The CVE-2023-39678 entry describes an XSS flaw in the web interface (Log Query page) of the BDCOM OLT P3310D-2AC, firmware 10.1.0F Build 69083. Vulnerable component: the Log Query username parameter; root cause is reflected/stored XSS allowing arbitrary web script/HTML execution. Impact explicitl...

6.1CVSS5.8AI score0.0037EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/12/16 2:29 a.m.2 views

CVE-2017-14093

The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting XSS attacks...

6.1CVSS5.2AI score
Exploits0References2
Rows per page
Query Builder