Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-54402

Malicious code in bioql PyPI...

5.3CVSS6.2AI score0.00202EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-52258

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0032EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-27657

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00553EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:46 a.m.20 views

CVE-2023-3134

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks...

6.1CVSS5.8AI score0.0354EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 p.m.8 views

CVE-2020-1949

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks...

6.1CVSS6AI score0.01965EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.3 views

PT-2025-22006 · Carzine · Carzine

Name of the Vulnerable Software and Affected Versions: CarZine versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations: For CarZine...

7.1CVSS8.9AI score0.00191EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/16 2:39 p.m.10 views

CVE-2024-13598

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS Cross-site Scripting attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run th...

5.1CVSS5.5AI score0.00202EPSS
Exploits0References1
CVE
CVE
added 2025/04/14 12:5 p.m.82 views

CVE-2024-13598

Internet Starter, a module of SoftCOM iKSORIS, is vulnerable to Reflected XSS via the form-field creation feature that adds new parameters. The vulnerability could allow an attacker to execute script in the victim’s browser context when a user submits a crafted form. The issue is addressed in ver...

6.1CVSS5.9AI score0.00202EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2023-29455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The scrip...

6.1CVSS5.7AI score0.00559EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/09/20 12:0 a.m.38 views

Apache Druid < 0.23.0 Multiple Vulnerabilities

The version of Apache Druid installed on the remote host is affected by the following vulnerabilities: - Certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks. CVE-2021-44791 - The server did n...

6.1CVSS5.5AI score0.01922EPSS
Exploits0References4
OSV
OSV
added 2023/07/13 10:15 a.m.10 views

CVE-2023-29455

Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts...

6.1CVSS9.2AI score
Exploits0References3
OSV
OSV
added 2023/07/13 10:15 a.m.14 views

CVE-2023-29457

Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts...

6.1CVSS9.2AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/05/09 12:0 a.m.41 views

Siemens SICAM P850 and SICAM P855 Improper Neutralization of Input During Web Page Generation (CVE-2022-29876)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker t...

7.1CVSS6.8AI score0.00787EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/05/10 9:47 a.m.24 views

CVE-2022-29876

A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks...

7.1CVSS6.1AI score0.00787EPSS
Exploits0References3
NVD
NVD
added 2021/06/18 10:15 a.m.8 views

CVE-2021-32536

The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks...

6.1CVSS0.00788EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2014/06/09 12:0 a.m.73 views

Cisco Ironport Email Security Virtual Appliance 8.0.0-671 XSS

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Cisco Ironport Email Security Virtual Appliance Version: 8.0.0-671 II. BACKGROUND ------------------------- Cisco Systems, Inc. is an American multinational corporation headquartered in San Jose, California, that...

4.3CVSS0.5AI score0.02426EPSS
Exploits4
Rows per page
Query Builder