Lucene search
+L

31368 matches found

Schneier on Security
Schneier on Security
added 2025/11/03 12:5 p.m.9 views

AI Summarization Optimization

These days, the most important meeting attendee isn’t a person: It’s the AI notetaker. This system assigns action items and determines the importance of what is said. If it becomes necessary to revisit the facts of the meeting, its summary is treated as impartial evidence. But clever meeting...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/01 2:20 p.m.14 views

CVE-2025-53883

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue affects Container suse/manager/5.0/x8664/server:latest: from ? before 5.0.28-150600.3.36.8; SUSE Manag...

9.3CVSS6AI score0.00274EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/01 12:25 a.m.14 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS6AI score0.01353EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.14 views

CVE-2022-50584

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting XSS vulnerability via the search and deletion interfaces. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script ...

5.4CVSS6.1AI score0.00392EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.13 views

CVE-2021-47693

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text handling. Unsanitized user-supplied input was incorporated into SQL queries used by configuration object editors, allowing authenticated users to inject...

8.8CVSS7.4AI score0.01051EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.6 views

CVE-2016-15050

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries...

8.8CVSS7.7AI score0.01033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 3:11 p.m.10 views

CVE-2025-5343

Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option...

6.3CVSS6.2AI score0.00424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 3:11 p.m.10 views

CVE-2025-5342

Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module...

6.5CVSS6.9AI score0.01061EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/31 12:30 a.m.9 views

EUVD-2025-37231

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS5.5AI score0.01353EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/31 12:30 a.m.8 views

EUVD-2016-10797

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries...

8.7CVSS7.2AI score0.01033EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/31 12:15 a.m.6 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS0.01353EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/10/31 12:0 a.m.12 views

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

6.3CVSS6.2AI score0.01353EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/30 11:32 p.m.23 views

CVE-2025-27208

Revive Adserver 5.5.2 is affected by a reflected Cross-Site Scripting (XSS) in admin-search.php via the compact parameter. An attacker able to lure a user with UI access into clicking a crafted URL can inject JavaScript to run in the victim’s browser; cookies aren’t exposed, but other actions may...

6.3CVSS5.6AI score0.01353EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/10/30 11:32 p.m.13 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS0.01353EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/30 11:32 p.m.3 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS6AI score0.01353EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/30 11:32 p.m.7 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS6AI score
SaveExploits0References4
OSV
OSV
added 2025/10/30 10:15 p.m.6 views

CVE-2022-50584

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting XSS vulnerability via the search and deletion interfaces. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script ...

5.4CVSS5.9AI score0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/30 10:15 p.m.9 views

CVE-2022-50584

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.6 / Nagios XI 5.8.8 contains a cross-site scripting XSS vulnerability via the search and deletion interfaces. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script ...

5.4CVSS0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/30 10:15 p.m.8 views

CVE-2022-50585

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.7 / Nagios XI 5.8.9 contains a cross-site scripting XSS vulnerability via the Audit Log page search input. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in...

5.4CVSS0.00414EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/30 10:15 p.m.11 views

CVE-2021-47693

The Core Config Manager CCM in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text handling. Unsanitized user-supplied input was incorporated into SQL queries used by configuration object editors, allowing authenticated users to inject...

8.8CVSS0.01051EPSS
SaveExploits0References2
Rows per page
Query Builder