Lucene search
+L

73 matches found

CVE
CVE
added 2026/01/15 11:25 p.m.15 views

CVE-2021-47808

CVE-2021-47808 relates to Cotonti Siena 0.9.19, exposing a stored cross-site scripting (XSS) vulnerability in the admin configuration panel’s site title parameter. The issue allows injection of JavaScript through the ‘maintitle’ field, enabling script execution when administrators view the page. ...

5.4CVSS5.9AI score0.00247EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.7 views

PT-2026-3178

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page...

7.2CVSS6.3AI score0.00247EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.6 views

EUVD-2022-42284

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00426EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-16662

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.00253EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-42285

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00426EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:19 a.m.9 views

sfc/siena: fix null pointer dereference in efx_hard_start_xmit

...

6.2CVSS7AI score0.00203EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/06/04 12:14 a.m.11 views

CVE-2025-44115

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config=edit=core=title. The manipulation of the value of title leads to cross-site scripting...

5.4CVSS6.8AI score0.00253EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/02 4:15 p.m.15 views

CVE-2025-44115

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting...

5.4CVSS0.00253EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/06/02 12:00 a.m.12 views

PT-2025-23531 · Unknown · Cotonti Siena

Name of the Vulnerable Software and Affected Versions: Cotonti Siena version 0.9.25 Description: A vulnerability has been found in Cotonti Siena. The issue affects the file "/admin.php?m=config&n=edit&o=core&p=title". The manipulation of the value of title leads to cross-site scripting...

5.4CVSS6AI score0.00253EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2025/06/02 12:00 a.m.7 views

CVE-2025-44115

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting...

6.2AI score0.00253EPSS
SaveExploits1References3
OSV
OSV
added 2025/06/02 12:00 a.m.6 views

CVE-2025-44115

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting...

5.4CVSS6.7AI score
SaveExploits0References5
CVE
CVE
added 2025/06/02 12:00 a.m.56 views

CVE-2025-44115

CVE-2025-44115 affects Cotonti Siena v0.9.25. The vulnerability is a cross-site scripting (XSS) flaw in the admin endpoint at /admin.php?m=config&n=edit&o=core&p=title where the value of the title parameter can be manipulated to inject script. According to connected sources, exploitation requires...

5.4CVSS6.5AI score0.00253EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/06/02 12:00 a.m.9 views

Cotonti Siena 跨站脚本漏洞

Cotonti Siena is a powerful open source web development framework and content manager from Cotonti Open Source. A security vulnerability exists in Cotonti Siena version v0.9.25, which stems from cross-site scripting due to incorrect manipulation of the parameter title in the file /admin.php...

5.4CVSS5.8AI score0.00253EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/02 12:00 a.m.22 views

CVE-2025-44115

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting...

0.00253EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 10:09 p.m.10 views

CVE-2022-39840

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message DM...

4.8CVSS5.8AI score0.00426EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:08 p.m.11 views

CVE-2022-39839

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post...

4.8CVSS5.8AI score0.00426EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2024/04/30 2:26 a.m.5 views

SUSE CVE-2022-48646

In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efxhardstartxmit Like in previous patch for sfc, prevent potential but unlikely NULL pointer dereference...

5.5CVSS6.3AI score0.00203EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2024/04/29 4:37 p.m.27 views

CVE-2022-48646

In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efxhardstartxmit Like in previous patch for sfc, prevent potential but unlikely NULL pointer dereference...

4.1CVSS7.3AI score0.00203EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/04/28 1:15 p.m.20 views

CVE-2022-48646

In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efxhardstartxmit Like in previous patch for sfc, prevent potential but unlikely NULL pointer dereference...

6.2CVSS6.2AI score0.00203EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/04/28 1:00 p.m.23 views

CVE-2022-48646

In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efxhardstartxmit Like in previous patch for sfc, prevent potential but unlikely NULL pointer dereference...

6.2CVSS6.2AI score0.00203EPSS
SaveExploits0
Rows per page
Query Builder