Lucene search
+L

13 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-52746

Malicious code in bioql PyPI...

7.1CVSS6.3AI score0.00897EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/05 8:34 p.m.•15 views

CVE-2022-31094

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS6.5AI score0.00897EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/30 12:00 a.m.•66 views

ScratchTools Cross-Site Scripting Vulnerability

ScratchTools is a web extension to the STForScratch open source. Designed to make interaction with the Scratch programming language community Scratching easier, ScratchTools suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of...

4.3CVSS1.9AI score0.00897EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2022/06/27 9:15 p.m.•31 views

CVE-2022-31094

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS0.00897EPSS
SaveExploits0References3
Prion
Prion
•added 2022/06/27 9:15 p.m.•20 views

Open redirect

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

4.3CVSS6AI score0.00897EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/27 9:05 p.m.•6 views

CVE-2022-31094 Cross site scripting vulnerability in ScratchTools

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS6.7AI score0.00897EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/06/27 9:05 p.m.•42 views

CVE-2022-31094 Cross site scripting vulnerability in ScratchTools

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS6.9AI score0.00897EPSS
SaveExploits0References3
CVE
CVE
•added 2022/06/27 9:05 p.m.•97 views

CVE-2022-31094

ScratchTools (a web extension for Scratch) is affected by a cross-site scripting vulnerability in the Recently Viewed Projects feature. If a user views a project whose title contains JavaScript, the title rendering can execute injected code, potentially hijacking the user’s account. The issue is ...

7.1CVSS6.2AI score0.00897EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/06/27 9:05 p.m.•29 views

CVE-2022-31094 Cross site scripting vulnerability in ScratchTools

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS6.2AI score
SaveExploits0References5
Mend
Mend
•added 2022/06/27 9:05 p.m.•2 views

CVE-2022-31094

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS0.00897EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/27 12:00 a.m.•4 views

CVE-2022-31094: Improper Neutralization of Input During Web Page Generation

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

7.1CVSS6.2AI score0.00897EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/27 12:00 a.m.•12 views

ScratchTools 跨站脚本漏洞

ScratchTools is a web extension to the STForScratch open source. Designed to make interaction with the Scratch programming language community Scratching easier, ScratchTools suffers from a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of...

7.1CVSS5.6AI score0.00897EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/06/27 12:00 a.m.•3 views

PT-2022-20522

Name of the Vulnerable Software and Affected Versions ScratchTools versions prior to 2.5.2 Description The issue affects users of the Recently Viewed Projects feature, making them vulnerable to account takeover if they view a project that attempts to exploit this issue. The problem arises when a...

7.1CVSS0.00897EPSS
SaveExploits0References8
Rows per page
Query Builder