CVE-2024-47920 Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47919 Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Tiki Wiki CMS – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-47918

CVE-2024-47918 pertains to Tiki Wiki CMS Groupware, with publicly available details indicating a CWE-80 Basic XSS due to improper neutralization of script-related HTML tags in web pages, affecting versions before 28.0 (OpenVAS entry notes multiple vulnerabilities). Additional sources flag potenti...

CVE-2024-47918 Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Tiki Wiki CMS – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-47917

The provided sources confirm CVE-2024-47917 is an XSS (CWE-79) vulnerability affecting Mobotix CCTV firmware. Affected component: Mobotix CCTV firmware MX-V3.4.2.16 (per CNNVD entry). Root cause: improper neutralization/encoding of input during web page generation. Impact: cross-site scripting wi...

CVE-2024-47917 Mobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47917 Mobotix - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2024-32896 · Unknown · Tiki Wiki Cms

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMS affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS vulnerability. This vulnerability allows for the execution o...

PT-2024-32902 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: Tecnick TCExam affected versions not specified Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection. This occurs because special elements in an SQL command are no...

Mobotix CCTV FW 跨站脚本漏洞

Mobotix CCTV FW is a network camera firmware from Mobotix, Germany. A cross-site scripting vulnerability exists in Mobotix CCTV FW MX-V3.4.2.16 version, which stems from improper input neutralization during web page generation...

Tiki wiki cms 操作系统命令注入漏洞

Tiki wiki cms is a website CMS. An operating system command injection vulnerability exists in versions of Tiki Wiki CMS prior to version 28, which stems from an improper neutralization of special elements used in operating system commands, resulting in an operating system command injection...

Tecnick TCExam 跨站脚本漏洞

Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams and so on. Tecnick TCExam suffers from a cross-site scripting vulnerability that originates from improper input neutralization during web page generation, resulting in a...

PT-2024-32893 · Unknown · Tiki Wiki Cms

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMS affected versions not specified Description: The issue is related to improper neutralization of script-related HTML tags in a web page, which can lead to basic XSS attacks. Additionally, there is a mention of improper...

Marp Core allows XSS by improper neutralization of HTML sanitization

Marp Core @marp-team/marp-core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting XSS due to improper neutralization of HTML sanitization. Impact Marp Core includes an HTML sanitizer with allowlist support. In the affected versions, the built-in allowlist is enabled by...

Cross-Site Scripting (XSS)

Drupal Core is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation, allowing malicious scripts to be executed on the client-side...

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization when importing a macro in a template whose filename is also a template. This will result in a SyntaxError: f-string: invalid syntax error message because the filename is not properly escaped, indicating that it i...

CVE-2024-47093 Fix various XSS issues and potential RCE

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093 Fix various XSS issues and potential RCE

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-47093

Improper neutralization of input in Nagvis before version 1.9.42 which can lead to XSS...

CVE-2024-9102 phpLDAPadmin: Improper Neutralization of Formula Elements

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value CSV file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet...