Lucene search
+L

135 matches found

OSV
OSV
added 2022/10/11 7:00 p.m.21 views

GHSA-633R-R4P8-PW3W Cross site scripting in Metro UI

Metro UI v4.4.0 to v4.5.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function. User input is not properly sanitized before rendering in the textarea component...

6.1CVSS6AI score0.00496EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/10/11 7:00 p.m.33 views

Cross site scripting in Metro UI

Metro UI v4.4.0 to v4.5.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function. User input is not properly sanitized before rendering in the textarea component...

6.1CVSS5.6AI score0.00496EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/10/11 5:15 p.m.9 views

CVE-2022-41376

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...

6.1CVSS5.7AI score0.00496EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/11 5:15 p.m.14 views

CVE-2022-41376

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...

6.1CVSS0.00496EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/10/11 12:00 a.m.10 views

PT-2022-25827 · Metro Ui · Metro Ui

Name of the Vulnerable Software and Affected Versions: Metro UI versions 4.4.0 through 4.5.1 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This occurs via a Javascript function where user input is not properly sanitized before rendering in the textarea...

6.1CVSS5.8AI score0.00496EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.4 views

CVE-2022-41376

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...

6.1AI score0.00496EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.24 views

CVE-2022-41376

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Javascript function...

6.2AI score0.00496EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.6 views

Metro UI 跨站脚本漏洞

Microsoft Metro UI v4.4.0 and later, and v4.5.0 and earlier, is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data, which could be exploited to inject web or html code...

6.1CVSS6.1AI score0.00496EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/11 12:00 a.m.69 views

CVE-2022-41376

The CVE-2022-41376 entry relates to a reflected cross-site scripting (XSS) vulnerability in Metro UI. Affected software includes Metro UI versions 4.4.0 through 4.5.0/4.5.1, where user-supplied input is not properly sanitized before rendering in the Javascript/textarea component, enabling injecti...

6.1CVSS6AI score0.00496EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/07 12:00 a.m.6 views

PT-2022-6359 · Dell Emc · Dell Emc Metro Node

Name of the Vulnerable Software and Affected Versions: Dell EMC Metro node versions prior to 7.1 Description: The issue is related to incorrect code generation management in the system, allowing a remote attacker to execute arbitrary commands. An authenticated nonprivileged attacker could...

9CVSS8.9AI score0.00833EPSS
SaveExploits0References6
The Hacker News
The Hacker News
added 2022/08/25 2:49 p.m.66 views

Okta Hackers Behind Twilio and Cloudflare Attacks Hit Over 130 Organizations

The threat actor behind the attacks on Twilio and Cloudflare earlier this month has been linked to a broader phishing campaign aimed at 136 organizations that resulted in a cumulative compromise of 9,931 accounts. The activity has been condemned 0ktapus by Group-IB because the initial goal of the...

1.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/07/15 12:00 a.m.9 views

PT-2022-22981 · Inductive Automation · Inductive Automation Ignition

Name of the Vulnerable Software and Affected Versions: Inductive Automation Ignition version 8.1.15 b2022030114 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authenticati...

8.8CVSS8.6AI score0.43328EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2022/04/13 5:29 p.m.11 views

ambercreekmetro.org Cross Site Scripting vulnerability OBB-2505333

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
added 2022/02/07 5:23 p.m.16 views

delhimetrorail.info Cross Site Scripting vulnerability OBB-2361879

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
HackRead
HackRead
added 2020/12/04 8:05 p.m.45 views

Ransomware attack disrupts Metro Vancouver’s payment systems

By Deeba Ahmed The payments systems remained ineffective for three days after the ransomware attack, but payment data is safe, claims TransLink. This is a post from HackRead.com Read the original post: Ransomware attack disrupts Metro Vancouvers payment systems...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/27 7:14 a.m.7 views

metro-motors.ca Improper Access Control vulnerability OBB-1367024

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/01/17 12:00 a.m.45 views

Fedora 31 : phpMyAdmin (2020-a1b4afe7b5)

Version 5.0.1 2020-01-07 - issue 15719 Fixed error 500 when browsing a table when $cfg'LimitChars' used a string and not an int value - issue 14936 Fixed display NULL on numeric fields has showing empty string since 5.0.0 - issue 15722 Fix get Database structure fails with PHP error on replicated...

6AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/11/19 11:38 a.m.11 views

metrofamilymagazine.com XSS vulnerability

Open Bug Bounty ID: OBB-699828 Description| Value ---|--- Affected Website:| metrofamilymagazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

SaveExploits0
Openbugbounty
Openbugbounty
added 2018/10/24 9:49 a.m.16 views

metro-oa.com XSS vulnerability

Open Bug Bounty ID: OBB-690093 Description| Value ---|--- Affected Website:| metro-oa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

0.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2018/10/10 10:00 a.m.28 views

Ensure Highly Reliable First Mile Connectivity with Akamai Direct Connect

As linear OTT video services become mainstream, many broadcasters and online video distributors are increasingly looking for new ways to enhance service reliability. Many who manage their own origin infrastructures within a datacenter environment are seeking added assurance for ingest of their...

2.5AI score
SaveExploits0
Rows per page
Query Builder