Cross site scripting

A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...

CVE-2023-51072

Nagios XI vulnerability CVE-2023-51072: a stored XSS in the NOC component affecting Nagios XI versions up to 2024R1 via the audio file upload in Operation Center. The issue allows low-privileged, authenticated users to inject arbitrary HTML/JavaScript, potentially executing code in other users’ b...

CVE-2023-51072: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...

CVE-2023-51072

A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...

CVE-2023-51072

A stored cross-site scripting XSS vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated us...

Honeywell UOC Security Vulnerability

Honeywell UOC is a unit operation controller from Honeywell USA. A security vulnerability exists in the Honeywell UOC that stems from allowing a file to be written that could result in unexpected behavior based on configuration changes or file updates...

RHEL 8 : nss (RHSA-2024:0093)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0093 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

AZL-34873 CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

Cross site scripting

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

CVE-2023-52068: Improper Neutralization of Input During Web Page Generation

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

PT-2024-14382 · Kodbox · Kodbox

Name of the Vulnerable Software and Affected Versions: kodbox version 1.43 Description: A cross-site scripting XSS issue was found in kodbox via the operation and login logs. This allows for potential malicious script execution. Recommendations: For kodbox version 1.43, update to a version that...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

WordPress plugin Super Forms security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

CVE-2023-52068

Kodbox v1.43 is impacted by a cross-site scripting (XSS) vulnerability exploitable via the operation and login logs. The CVE entry (CVE-2023-52068) associates a CVSS v3.1 base score of 6.1 (MEDIUM) with network attack vector, no privileges required, user interaction required. The root cause is de...

VulnCheck KEV: CVE-2020-11854

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge containerized vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge containerized and Application Performance Management. The vulneravili...

CVE-2023-52030

TOTOlink A3700R v9.1.2u.5822B20200513 was discovered to contain a remote command execution RCE vulnerability via the setOpModeCfg function...

TOTOLINK LR1200GB setOpModeCfg Function OS Command Injection Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's Gion Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks, and is primarily used to provide mobile broadband connectivity and Wi-Fi coverage. The TOTOLINK LR1200GB suffers from an operating system command...