Lucene search
+L

365 matches found

OpenVAS
OpenVAS
added 2022/10/28 12:0 a.m.18 views

PRTG Network Monitor < 23.1.83.1742 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS6.4AI score0.00726EPSS
Exploits1References3
OSV
OSV
added 2022/10/25 5:15 p.m.9 views

CVE-2022-35739

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5.3CVSS5.9AI score0.00726EPSS
Exploits1References2
NVD
NVD
added 2022/10/25 5:15 p.m.18 views

CVE-2022-35739

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5.3CVSS0.00726EPSS
Exploits1References2
Prion
Prion
added 2022/10/25 5:15 p.m.19 views

Cross site scripting

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5CVSS5.1AI score0.00726EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/10/25 12:0 a.m.34 views

CVE-2022-35739

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5.3AI score0.00726EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.6 views

PT-2022-22956 · Paessler · Prtg Network Monitor

Name of the Vulnerable Software and Affected Versions: PRTG Network Monitor versions prior to 22.2.77.2205 Description: The issue allows custom input for a device's icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrar...

5.3CVSS5.1AI score0.00726EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/10/25 12:0 a.m.6 views

CVE-2022-35739

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets CSS data is inserted into the style tag, loading...

5.1AI score0.00726EPSS
Exploits1References2
CVE
CVE
added 2022/10/25 12:0 a.m.84 views

CVE-2022-35739

PRTG Network Monitor vulnerable through version 22.2.77.2204 where custom input on a device icon can inject arbitrary CSS into the device’s style tag. When the device page loads, the injected CSS may load malicious content. The issue cannot be escalated to XSS due to input restrictions and browse...

5.3CVSS5.1AI score0.00726EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2021/09/14 12:0 a.m.29 views

PRTG Network Monitor Cross-Site Scripting Vulnerability (CNVD-2021-93888)

PRTG Network Monitor is an uptime and bandwidth monitoring software that supports various sensor types.A stored cross-site scripting vulnerability exists in versions prior to PRTG Network Monitor 21.3.69.1333. An attacker can execute malicious JavaScript by importing a specially crafted string fr...

5.4CVSS3AI score0.00609EPSS
Exploits1References1
OSV
OSV
added 2021/09/13 3:15 p.m.5 views

CVE-2021-29643

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...

5.4CVSS6.1AI score0.00609EPSS
Exploits1References2
NVD
NVD
added 2021/09/13 3:15 p.m.36 views

CVE-2021-29643

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...

5.4CVSS0.00609EPSS
Exploits1References2
Prion
Prion
added 2021/09/13 3:15 p.m.15 views

Cross site scripting

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...

3.5CVSS5.1AI score0.00609EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/13 3:15 p.m.4 views

CVE-2021-29643

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...

5.4CVSS6.2AI score0.00609EPSS
Exploits1References3
Cvelist
Cvelist
added 2021/09/13 2:42 p.m.29 views

CVE-2021-29643

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...

5.3AI score0.00609EPSS
Exploits1References2
CVE
CVE
added 2021/09/13 2:42 p.m.62 views

CVE-2021-29643

CVE-2021-29643 affects Paessler PRTG Network Monitor prior to 21.3.69.1333. The issue is a stored cross-site scripting (XSS) vulnerability arising from an unsanitized string imported from a User Object in a connected Active Directory instance. Impact is stored XSS in the browser context, enabling...

5.4CVSS5.1AI score0.00609EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.9 views

Paessler PRTG Network Monitor 跨站脚本漏洞

PRTG Network Monitor is an uptime and bandwidth monitoring software that supports various sensor types.A stored cross-site scripting vulnerability exists in versions prior to PRTG Network Monitor 21.3.69.1333. An attacker can execute malicious JavaScript by importing a specially crafted string fr...

5.4CVSS5.3AI score0.00609EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.10 views

PRTG Network Monitor < 21.3.69.1333 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

5.4CVSS6.4AI score0.00609EPSS
Exploits1References2
NCSC
NCSC
added 2021/07/07 12:0 a.m.8 views

Vulnerability fixed in PRTG Network Monitor

A vulnerability has been fixed in PRTG Network Monitor. A malicious party can exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the application is visited. Paessler has released updat...

5.4CVSS6.2AI score0.00609EPSS
Exploits1
CNVD
CNVD
added 2021/06/26 12:0 a.m.13 views

Weak Password Vulnerability in PRTG Network Monitor

PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers and more. PRTG Network Monitor suffers from a weak password vulnerability, which can be exploited by attackers to log in to the backend and obtain sensitive...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2021/06/11 12:0 a.m.15 views

PRTG Network Monitor < 21.1.66.1623 Information Disclosure Vulnerability

PRTG Network Monitor is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

5.3CVSS6.8AI score0.02033EPSS
Exploits0References1
Rows per page
Query Builder