717 matches found
CVE-2022-25774 XSS in Notifications via saving Dashboards
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards...
CVE-2022-25774
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards...
CVE-2022-25774: Improper Neutralization of Input During Web Page Generation
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards...
JetBrains TeamCity < 2024.07.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2024.07.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions CVE-2024-43114 - In JetBrains TeamCity before...
CVE-2024-43808
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
CVE-2024-43808
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
CVE-2024-43808
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
CVE-2024-43808
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
CVE-2024-43808
CVE-2024-43808 affects JetBrains TeamCity before 2024.07.1. The issue is a self XSS vulnerability in the HashiCorp Vault plugin . Root cause: inadequate handling/sanitation of user-controllable content in the Vault plugin UI, enabling client-side script execution. Impact: the vulnerability could ...
CVE-2024-43808: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
CVE-2024-41663
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...
CVE-2024-41663
CVE-2024-41663 concerns Canarytokens’ Cloned Website feature. The issue is a self‑XSS: the creator of a slow‑redirect Canarytoken can inject JavaScript into the destination URL, which executes when the creator later opens the token’s management page. Attackers could craft a token with this self‑X...
CVE-2024-41663 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...
CVE-2024-41663 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...
CVE-2024-41663: Improper Neutralization of Input During Web Page Generation
Canarytokens help track activity and actions on a network. A Cross-Site Scripting vulnerability was identified in the "Cloned Website" Canarytoken, whereby the Canarytoken's creator can attack themselves. The creator of a slow-redirect Canarytoken can insert Javascript into the destination URL of...
Joomla! 5.x < 5.1.2 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.16, 4.x prior to 4.4.6 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities. - Inadequate input validation leads to XSS vulnerabilities in the...
CVE-2024-21730
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector...
CVE-2024-21730
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector...