8865 matches found
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Premio Chaty plugin = 3.1.2 versions...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MagePeople Team WpBusTicketly plugin = 5.2.5 versions...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AazzTech WooCommerce Product Carousel Slider plugin = 3.3.5 versions...
CVE-2023-6157
Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...
CVE-2023-6156 Livestatus injection in availability timeline
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...
CVE-2023-6156 Livestatus injection in availability timeline
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...
CVE-2023-2889 SQLi in Veon Computer's Service Tracking Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0...
CVE-2023-6011 Stored XSS in Geodi
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DECE Software Geodi allows Stored XSS. This issue affects Geodi: before 8.0.0.27396...
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software arises from the lack of measures to neutralize special elements, allowing a perpetrator to execute arbitrary codes.
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to disable user notifications remotely...
CLSA-2023-1700160963 Fix CVE(s): CVE-2023-42117, CVE-2023-42119
SECURITY UPDATE: Remote code execution because of improper neutralization of special elements - debian/patches/CVE-2023-42117.patch: fix stringisipaddress - CVE-2023-42117 SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against...
ROS-20231116-01
A vulnerability in the RoundCube email client is related to improper input neutralization during the creation of a of a web page. Exploitation of the vulnerability could allow an attacker acting remotely to conduct a cross-site scripted attack. cross-site scripting attacks...
CVE-2023-5987
A CWE-79 Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected...
CVE-2023-5985
A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values...
Design/Logic Flaw
A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values...
Cross site scripting
A CWE-79 Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected...
CVE-2023-5985
CVE-2023-5985 affects Schneider Electric PowerLogic ION8650 and ION8800 (industrial OT meters). The vulnerability is described as CWE-79: Improper Neutralization of Input During Web Page Generation, enabling an attacker with administrative privileges who has modified system values to cause a user...
VulnCheck KEV: CVE-2021-21087
Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary...
CVE-2022-44738
Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3...