8308 matches found
CVE-2025-9683
A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...
CVE-2025-9683 O2OA Personal Profile form cross site scripting
A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...
CVE-2025-9682 O2OA Personal Profile appdict cross site scripting
A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xcmsassemblecontrol/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...
CVE-2025-9681
The CVE-2025-9681 vulnerability affects the O2OA platform, specifically the Personal Profile Page component, within the /x_program_center/jaxrs/agent file. The flaw is triggered by manipulation of an unknown function, enabling cross-site scripting and allowing a remote attacker to exploit the iss...
PT-2025-35351
Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A cross-site scripting issue exists in O2OA’s Personal Profile Page. The issue is related to an unknown functionality of the file /x cms assemble control/jaxrs/design/appdict. The attack can be...
Linux Distros Unpatched Vulnerability : CVE-2021-31804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document. CVE-2021-31804 Note that Nessus relies on the presence of the packag...
PT-2025-35352
Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A cross site scripting issue exists in O2OA up to version 10.0-410. The issue is related to an unknown functionality within the file /x cms assemble control/jaxrs/form of the Personal Profile Page...
PT-2025-35348
Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A flaw exists in O2OA, potentially leading to cross site scripting. The issue affects an unknown function within the /x program center/jaxrs/agent file of the Personal Profile Page component. The atta...
Linux Distros Unpatched Vulnerability : CVE-2023-49086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database TSDB. A vulnerability in versions prior to 1.2.2...
Linux Distros Unpatched Vulnerability : CVE-2021-41585
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new...
Linux Distros Unpatched Vulnerability : CVE-2018-19800
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aubio v0.4.0 to v0.4.8 has a Buffer Overflow in newaubiotempo. CVE-2018-19800 Note that Nessus relies on the presence of the package as reported by the vendor...
Linux Distros Unpatched Vulnerability : CVE-2018-18193
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp. CVE-2018-18193 No...
Linux Distros Unpatched Vulnerability : CVE-2017-17091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attacker...
CVE-2025-9658
A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /xportalassembledesigner/jaxrs/dict/ of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scripting. Remote exploitation of the attack is possibl...
CVE-2025-9658 O2OA Personal Profile dict cross site scripting
A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /xportalassembledesigner/jaxrs/dict/ of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scripting. Remote exploitation of the attack is possibl...
CVE-2025-9657
CVE-2025-9657 (O2OA) affects O2OA up to version 10.0-410, specifically the Personal Profile Page component. The vulnerability is a cross-site scripting flaw caused by improper processing of the file path /x_program_center/jaxrs/script where manipulation of the argument name/alias/description can ...
CVE-2025-9655
A weakness has been identified in O2OA up to 10.0-410. This affects an unknown part of the file /xorganizationassemblecontrol/jaxrs/person/ of the component Personal Profile Page. Executing manipulation of the argument Description can lead to cross site scripting. The attack can be launched...
PT-2025-35247
Name of the Vulnerable Software and Affected Versions: O2OA versions prior to 10.0-410 Description: A cross-site scripting issue exists in O2OA’s Personal Profile Page component. The issue is related to an unknown function within the /x portal assemble designer/jaxrs/widget file. Successful...
