12 matches found
CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
...
EUVD-2025-24302
Malicious code in bioql PyPI...
CVE-2025-49745
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...
CVE-2023-5556
Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...
CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises
Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...
CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises
Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...
CVE-2023-5556
CVE-2023-5556 corresponds to a reflected Cross-Site Scripting (XSS) in Structurizr on-premises prior to 3194. The vulnerability is triggered via the version parameter in workspace URLs (e.g., GET /workspace/[workspaceid]?version=...). The issue allows an attacker to inject JavaScript in authentic...
onpremises Cross-Site Scripting Vulnerability
onpremises is an open source application from Structurizr. A cross-site scripting vulnerability exists in versions prior to onpremises 3194. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-32174 · Structurizr · Structurizr/Onpremises
Name of the Vulnerable Software and Affected Versions: structurizr/onpremises versions prior to 3194 Description: The issue is related to Cross-site Scripting XSS - Reflected. This means that an attacker can inject malicious scripts into a website, which are then executed by the user's browser...
RXSS in onpremises version of structurizr
Description During investigation it was found that onpremises api endpoint GET parameter version is vulnerable to XSS injection: /workspace/workspaceid?version=1; Proof of Concept 1. Visit the link provided: http:///workspace/1/?version=1%22;alert1; 2. XSS injected...
HPESBNW04308 rev.5 - Aruba Products, Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform 8.2.14.0 and below Aruba LIC-ALE-1 Analytics and Location Engine 1 AP License E-LTU 2.2.0.2 and below Aruba Fabric...