Lucene search
+L

2730 matches found

Veracode
Veracode
•added 2023/07/23 2:43 p.m.•24 views

Cross Site Scripting (XSS)

gitlab is vulnerable to Cross-site Scripting XSS. The vulnerability occurs when viewing a XML file in the repository in 'raw' mode which could be rendered as HTML in certain conditions, which allows an authenticated attacker to inject and execute malicious javascript on victim's browser...

5.4CVSS5.6AI score0.00753EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2023/07/22 7:53 a.m.•25 views

Cross-site Scripting (XSS)

gitlab is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of sanitization in the external status checks of the library, allowing an attacker to inject and execute malicious javascript...

7.3CVSS6.5AI score0.00718EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/07/21 8:20 p.m.•45 views

copyparty vulnerable to reflected cross-site scripting via hc parameter

Summary The application contains a reflected cross-site scripting via URL-parameter ?hc=... Details A reflected cross-site scripting XSS vulnerability exists in the web interface of the application that could allow an attacker to execute malicious javascript code by tricking users into accessing ...

6AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/21 12:00 a.m.•9 views

PT-2023-33011 · Copyparty · Copyparty

Name of the Vulnerable Software and Affected Versions: copyparty affected versions not specified Description: A reflected cross-site scripting vulnerability exists in the web interface of the application, allowing an attacker to execute malicious javascript code by tricking users into accessing a...

6.3CVSS6.7AI score
SaveExploits0References5
Veracode
Veracode
•added 2023/07/19 4:02 a.m.•30 views

Cross-site Scripting (XSS)

clevertap-cordova is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the data from the deep links, allowing an attacker to inject and execute malicious javascript...

9.3CVSS6.6AI score0.00855EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2023/07/18 1:51 p.m.•29 views

Cross-Site Scripting (XSS)

webmention.js is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability is due to improper sanitization of the comments parameter in the formatComments function, allowing an attacker to inject and execute malicious JavaScript in a victim's browser...

6.1CVSS6AI score0.0049EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/07/13 3:15 p.m.•38 views

CVE-2023-31705

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

5.4CVSS0.00516EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/07/13 3:15 p.m.•11 views

CVE-2023-31705

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

5.4CVSS5.7AI score0.00516EPSS
SaveExploits0References3
Prion
Prion
•added 2023/07/13 3:15 p.m.•36 views

Cross site scripting

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

4.9CVSS5.2AI score0.00516EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•3 views

PT-2023-23425

Name of the Vulnerable Software and Affected Versions Sourcecodester Task Reminder System version 1.0 Description A Reflected Cross-site scripting XSS vulnerability allows an authenticated user to inject malicious javascript into the page parameter. This issue enables attackers to execute malicio...

5.4CVSS0.00516EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/07/13 12:00 a.m.•44 views

CVE-2023-31705

A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter...

5.5AI score0.00516EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/07/12 9:34 a.m.•36 views

Cross-Site Scripting (XSS)

github.com/mlogclub/bbs-go is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim's browser via a crafted payload to the comment...

5.4CVSS6AI score0.0056EPSS
SaveExploits1References6Affected Software1
CNVD
CNVD
•added 2023/07/12 12:00 a.m.•83 views

Siemens RUGGEDCOM ROX cross-site scripting vulnerability (CNVD-2023-55710)

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...

8.8CVSS6.4AI score0.00442EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/11 10:15 a.m.•40 views

CVE-2023-36386

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

8.8CVSS7.7AI score0.00442EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/07/11 10:15 a.m.•20 views

CVE-2023-36389

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

6.1CVSS7.3AI score0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/11 9:07 a.m.•43 views

CVE-2023-36389

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

8.8CVSS7.8AI score0.00442EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•4 views

CVE-2023-36390: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

8.8CVSS6.8AI score0.00442EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX 系列多款产品 跨站脚本漏洞

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...

8.8CVSS6.5AI score0.00442EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•4 views

CVE-2023-36386: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

8.8CVSS6.8AI score0.00442EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•20 views

Siemens RUGGEDCOM ROX 系列多款产品 跨站脚本漏洞

RUGGEDCOM products offer a degree of robustness and reliability that sets the standard for communication networks deployed in harsh environments. A cross-site scripting vulnerability exists in Siemens RUGGEDCOM ROX, which can be exploited by attackers to execute malicious javascript code by...

8.8CVSS6.5AI score0.00442EPSS
SaveExploits0References2
Rows per page
Query Builder