Lucene search
+L

18 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•6 views

CVE-2024-50808: Improper Control of Generation of Code

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

8.8CVSS5.8AI score0.006EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/12/13 2:15 p.m.•10 views

CVE-2023-47324

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting XSS via the message/notification feature...

5.4CVSS6AI score0.00477EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•24 views

PT-2023-30417

Name of the Vulnerable Software and Affected Versions Silverpeas Core version 6.3.1 and prior Description The issue is related to Cross Site Scripting XSS via the message/notification feature. This allows for potential malicious script execution. No information is provided about the estimated...

5.4CVSS6.2AI score0.00477EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•2 views

CVE-2023-47324: Improper Neutralization of Input During Web Page Generation

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting XSS via the message/notification feature...

5.4CVSS6.8AI score0.00477EPSS
SaveExploits1References6
Mend
Mend
•added 2023/12/13 12:00 a.m.•2 views

CVE-2023-47324

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting XSS via the message/notification feature...

5.4CVSS0.00477EPSS
SaveExploits1References6
OSV
OSV
•added 2023/12/13 12:00 a.m.•42 views

CVE-2023-47324

Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting XSS via the message/notification feature...

5.3AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/27 12:00 a.m.•15 views

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is an event at school. A security vulnerability exists in School Activity Updates...

9.8CVSS8.3AI score0.00897EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/16 3:15 p.m.•15 views

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

7.2CVSS5.8AI score0.01039EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/09/16 12:00 a.m.•13 views

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

7.2CVSS7.3AI score0.01017EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/08 9:15 p.m.•13 views

CVE-2022-38267

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=...

7.2CVSS5.8AI score0.00883EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•22 views

School Activity Updates with SMS Notification v1.0 SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is an activity in the school. A security vulnerability exists in School Activity...

7.2CVSS7.2AI score0.00883EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•15 views

School Activity Updates with SMS Notification v1.0 SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A security vulnerability exists in School Activity Updates...

7.2CVSS7.2AI score0.00883EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/10/11 12:00 a.m.•11 views

CloudBees Jenkins SMS Notification Plugin Unauthorized Access Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit Trail Plugin is used in one of the audi...

3.3CVSS6.6AI score0.00335EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2020/04/24 8:41 p.m.•66 views

Latest Apple Text-Bomb Crashes iPhones via Message Notifications

Apple devices are vulnerable to a “text bomb” attack where simply looking at messages or posts containing characters in the Sindhi language can crash devices. Sindhi is an official language used in Pakistan. The bug affects iPhone, iPad, Macs and Apple Watches, and arises from macOS and iOS faili...

7.3AI score
SaveExploits0References12
CNVD
CNVD
•added 2016/02/24 12:00 a.m.•15 views

Xymon HTML Injection Vulnerability

Xymon is an open source , cross-platform network monitoring application . The application can be viewed through the web page of the operational status of each server , and supports Email and SMS notification function . There is an HTML injection vulnerability in Xymon. This vulnerability can be...

5.4CVSS7.9AI score0.01217EPSS
SaveExploits1References1
Cisco Threats
Cisco Threats
•added 2014/03/27 2:52 p.m.•14 views

Threat Outbreak Alert: Fake Encrypted Message Notification Email Messages on March 27, 2013

Medium Alert ID: 33539 First Published: 2014 March 27 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a secure message for the recipient. The text in the email message attempts to convince the recipient to open the...

0.1AI score
SaveExploits0
Cisco Threats
Cisco Threats
•added 2013/09/19 6:43 p.m.•19 views

Threat Outbreak Alert: Fake eFax Message Notification Email Messages on September 19, 2013

Medium Alert ID: 30914 First Published: 2013 September 19 18:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notification for the recipient. The text in the email message attempts to convince the recipie...

6.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2008/08/22 4:00 p.m.•36 views

CVE-2008-3773

Cross-site scripting XSS vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notification Pop-Up" is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a private message subject aka newpmtitle...

5.3AI score0.03765EPSS
SaveExploits1References8
Rows per page
Query Builder