Lucene search
K

16 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-45437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site...

6.5CVSS5.3AI score0.00727EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 1:38 p.m.6 views

CVE-2020-26205

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

7.6CVSS5.8AI score0.00162EPSS
Exploits0
CNNVD
CNNVD
added 2025/01/12 12:0 a.m.1 views

HCL DRYiCE MyXalytics 安全漏洞

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a plaintext transfer of sensitive information vulnerability...

7.5CVSS6.5AI score0.00134EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.1 views

HCL DRYiCE MyXalytics 安全漏洞

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a password policy misimplementation vulnerability...

4.8CVSS6.9AI score0.00228EPSS
Exploits0References1
NVD
NVD
added 2023/02/15 4:15 a.m.8 views

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

6.5CVSS6.2AI score0.00727EPSS
Exploits0References2
OSV
OSV
added 2023/02/15 4:15 a.m.0 views

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

4.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2023/02/15 4:15 a.m.1 views

UBUNTU-CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

6.5CVSS5.8AI score0.00727EPSS
Exploits0References3
Prion
Prion
added 2023/02/15 4:15 a.m.9 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

4.3CVSS4.9AI score0.00727EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/02/15 4:15 a.m.16 views

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

6.5CVSS5.9AI score0.00727EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/02/15 12:0 a.m.5 views

CVE-2022-45437 Stored cross-site scripting vulnerability in the reporting dashboard module

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

6.5CVSS6.3AI score0.00727EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/02/15 12:0 a.m.3 views

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...

6.5CVSS5.1AI score0.00727EPSS
Exploits0References7
Huntr
Huntr
added 2022/11/03 7:50 p.m.11 views

Application-Wide Stored Cross Site Scripting affecting all Users

Description Hi Team, I have found a stored cross-site scripting vulnerability in the reporting dashboard module. What is stored cross site scripting attack? Stored XSS, occurs when user supplied input is stored and then rendered within a web page. Typical entry points for stored XSS are: message...

5.5AI score
Exploits0
NVD
NVD
added 2020/10/29 8:15 p.m.10 views

CVE-2020-26205

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

7.6CVSS7.2AI score0.00162EPSS
Exploits0References2
Prion
Prion
added 2020/10/29 8:15 p.m.13 views

Spoofing

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

3.5CVSS5.2AI score0.00162EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/29 8:0 p.m.14 views

CVE-2020-26205 XSS in Sal

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

7.6CVSS7.2AI score0.00162EPSS
Exploits0References2
CVE
CVE
added 2020/10/29 8:0 p.m.45 views

CVE-2020-26205

CVE-2020-26205 affects Sal, a multi-tenant reporting dashboard for Munki that displays data from Facter. The connected sources describe an XSS vulnerability in the machine_list view present up to Sal version 4.1.6. The vulnerability is surfaced via input that can be reflected into the page, enabl...

7.6CVSS5.5AI score0.00162EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder