Lucene search
+L

1160 matches found

Cvelist
Cvelist
•added 2024/12/05 12:00 a.m.•55 views

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

0.00431EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•16 views

Codezips Project Management System 注入漏洞

Codezips Project Management System is an open source project management system from Codezips. An injection vulnerability exists in CodeZips Project Management System version 1.0, which stems from an incorrect manipulation of the parameter email that can lead to SQL injection...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References4
OSV
OSV
•added 2024/11/18 6:15 a.m.•13 views

CVE-2024-52944

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user witho...

5.4CVSS5.8AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/18 6:15 a.m.•24 views

CVE-2024-52944

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user witho...

5.4CVSS0.00352EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/18 6:15 a.m.•13 views

CVE-2024-52943

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting XSS while viewing archived content. This could reflect back to an authenticated user...

5.4CVSS5.8AI score0.01105EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•12 views

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

5.4CVSS5.5AI score0.00345EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•14 views

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

5.4CVSS5.5AI score0.01105EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/18 12:00 a.m.•31 views

CVE-2024-52944

An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user witho...

5.4CVSS0.00352EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•18 views

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

5.4CVSS5.5AI score0.00352EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•12 views

Veritas Enterprise Vault 安全漏洞

Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communications platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.1 UPD882911, which stems from a vulnerability that allows an authenticated,...

5.4CVSS5.5AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/17 12:00 a.m.•11 views

PT-2024-35495 · Veritas · Veritas Enterprise Vault

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions prior to 15.1 UPD882911 Description: The issue allows an authenticated remote attacker to inject a parameter into an HTTP request, enabling Cross-Site Scripting while viewing archived content. This could...

5.4CVSS6.5AI score0.00352EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/11/17 12:00 a.m.•13 views

PT-2024-35492 · Veritas · Veritas Enterprise Vault

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions prior to 15.1 UPD882911 Description: The issue allows an authenticated remote attacker to inject a parameter into an HTTP request, enabling Cross-Site Scripting XSS while viewing archived content. This could...

5.4CVSS6.1AI score0.00345EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•15 views

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

9.1CVSS9.4AI score0.01732EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•16 views

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

9.1CVSS9.4AI score0.01886EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•13 views

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

9.1CVSS9.3AI score0.01732EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•12 views

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

9.1CVSS9.4AI score0.01732EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•12 views

Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...

9.1CVSS9.3AI score0.01732EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/12 12:00 a.m.•65 views

Laravel 参数注入漏洞

Laravel is a web application framework from the Laravel community. A parameter injection vulnerability exists in Laravel. An attacker exploiting this vulnerability can call any URL using a specially crafted query string...

8.7CVSS6.9AI score0.44757EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•16 views

IBPhoenix ibWebAdmin 注入漏洞

IBPhoenix ibWebAdmin is a Firebird and InterBase database server web front end from IBPhoenix. An injection vulnerability exists in IBPhoenix ibWebAdmin 1.0.2 and earlier versions, which stems from the parameter p in the file /togglefoldpanel.php in the Tabelas Section can lead to a cross-site...

5.3CVSS4.7AI score0.00325EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2024/11/01 7:00 a.m.•7 views

PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass)

...

9.8CVSS7AI score0.99987EPSS
SaveExploits69
Rows per page
Query Builder