Lucene search
+L

8846 matches found

Github Security Blog
Github Security Blog
added 2021/12/16 2:27 p.m.27 views

pimcore is vulnerable to Cross-site Scripting

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS1.9AI score0.00755EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/12/16 2:26 p.m.23 views

GHSA-8QV8-FQ5W-P966 phpservermon is vulnerable to CRLF Injection

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...

6.3CVSS5.3AI score0.00843EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/12/16 2:15 p.m.9 views

CVE-2021-4124

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.1CVSS6.8AI score0.00942EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/12/16 1:15 p.m.28 views

CVE-2021-4124 Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.1CVSS6.4AI score0.00942EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/16 8:15 a.m.19 views

CVE-2021-4121

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS0.00764EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/16 8:15 a.m.9 views

CVE-2021-4121

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS6.5AI score0.00764EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/12/16 12:0 a.m.3 views

PT-2021-23206 · Unknown +2 · Janus-Gateway +2

Name of the Vulnerable Software and Affected Versions: janus-gateway affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user...

8.8CVSS8.1AI score0.00942EPSS
SaveExploits2References18
ATTACKERKB
ATTACKERKB
added 2021/12/14 8:15 p.m.8 views

CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS6.5AI score0.00764EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/14 8:15 p.m.18 views

CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS0.00764EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/14 8:10 p.m.20 views

CVE-2021-4108 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.4CVSS6.4AI score0.00764EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/14 3:15 p.m.6 views

CVE-2021-4107

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS5.9AI score0.00782EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/14 11:15 a.m.17 views

CVE-2021-3831

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.1CVSS0.01812EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/12 12:15 a.m.7 views

CVE-2021-4097

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...

6.3CVSS6.2AI score0.00843EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/10 12:15 p.m.6 views

CVE-2021-4084

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.4CVSS6.8AI score0.0156EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/10 11:15 a.m.8 views

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS5.9AI score0.00755EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/09 11:15 a.m.4 views

CVE-2021-3817

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS7.3AI score0.38418EPSS
SaveExploits4References4
Prion
Prion
added 2021/12/09 11:15 a.m.29 views

Command injection

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

7.5CVSS9.7AI score0.38418EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
added 2021/12/09 10:50 a.m.42 views

CVE-2021-3817 SQL Injection in wbce/wbce_cms

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS10AI score0.38418EPSS
SaveExploits4References3
Prion
Prion
added 2021/12/08 2:15 p.m.20 views

Cross site scripting

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the login webpage...

4.3CVSS6.6AI score0.00885EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/12/08 1:15 p.m.31 views

CVE-2021-41015

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler...

6.1CVSS0.00823EPSS
SaveExploits0References1
Rows per page
Query Builder