EUVD-2023-30788

Malicious code in bioql PyPI...

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

Cross site scripting

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

Cross site scripting

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

CVE-2023-27000

Summary: NetScout nGeniusONE v6.3.4 contains a cross‑site scripting vulnerability that allows a remote attacker to execute arbitrary code via the name parameter on the Profile and Exclusion List pages. Affected component: NetScoutnGeniusOne 6.3.4 (name parameter handling on Profile/Exclusion List...

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

CVE-2023-26998

CVE-2023-26998 affects NetScout nGeniusOne 6.3.4. The vulnerability is a Cross Site Scripting issue in the Alert Configuration page, exploitable via the creator parameter, enabling a remote attacker to execute arbitrary code. Root cause relates to unsanitized input in the creator field. No offici...