Lucene search
K

7 matches found

NVD
NVD
added 2025/09/09 5:16 p.m.1 views

CVE-2025-57539

A stored cross-site scripting XSS vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment PVE 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially...

5.4CVSS0.00052EPSS
Exploits1References3
OSV
OSV
added 2025/09/09 5:16 p.m.0 views

CVE-2025-57539

A stored cross-site scripting XSS vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment PVE 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially...

5.4CVSS5.7AI score
Exploits0References3
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.1 views

Proxmox Virtual Environment 安全漏洞

Proxmox Virtual Environment Proxmox VE is an open source server virtualization environment Linux distribution from Proxmox. A security vulnerability exists in Proxmox Virtual Environment version 8.4, which stems from a U2F Origin field stored cross-site scripting vulnerability that could lead to...

5.4CVSS5.9AI score0.00052EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.1 views

PT-2025-36793

Name of the Vulnerable Software and Affected Versions: Proxmox Virtual Environment versions 8.4 Description: A stored cross-site scripting XSS vulnerability exists in the U2F Origin field of the Datacenter configuration. Authenticated users can store malicious input which is rendered unsafely in...

5.4CVSS5.3AI score0.00052EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/09/09 12:0 a.m.4 views

CVE-2025-57539

A stored cross-site scripting XSS vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment PVE 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially...

0.00052EPSS
Exploits1References3
FreeBSD
FreeBSD
added 2020/09/16 12:0 a.m.17 views

py-matrix-synapse -- malformed events may prevent users from joining federated rooms

Problem Description: Affected Synapse versions assume that all events have an "origin" field set. If an event without the "origin" field is sent into a federated room, servers not already joined to the room will be unable to do so due to failing to fetch the malformed event. Impact: An attacker...

1.7AI score
Exploits0References3
Packet Storm
Packet Storm
added 2011/05/04 12:0 a.m.33 views

SIPDroid Agent User Enumeration

=====Tempest Security Intelligence - Advisory 01/2011 ======================================================================================================================== User enumeration in SIPDroid Agent ---------------------------------- Author: Anibal Vaz Marques de Aguiar =====Table of...

7.4AI score
Exploits0
Rows per page
Query Builder