Lucene search
K

7 matches found

OSV
OSV
added 2023/01/10 4:15 a.m.0 views

CVE-2023-0023

In SAP Bank Account Management Manage Banks application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application...

5.7CVSS6.2AI score0.00214EPSS
Exploits0References2
CVE
CVE
added 2023/01/10 3:32 a.m.51 views

CVE-2023-0023

Technical details (affected software, exact versions, root cause, exploit specifics) are not publicly available in the provided connected documents. Monitor SAP notes and related advisories for updates.

5.7CVSS5AI score0.00214EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 4:41 a.m.10 views

Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

3.5CVSS5.5AI score0.01071EPSS
Exploits1References10Affected Software1
CVE
CVE
added 2014/05/27 2:0 p.m.59 views

CVE-2014-3840

CVE-2014-3840 affects Mayan EDMS 0.13, with multiple stored XSS vulnerabilities in apps/common/templates/calculate_form_title.html. The issue allows remote authenticated users to inject arbitrary script/HTML via several vectors: (1) a tag, (2) the title of a source in a Staging folder, (3) the Na...

3.5CVSS5.4AI score0.01071EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2014/05/27 2:0 p.m.15 views

CVE-2014-3840

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

5.4AI score0.01071EPSS
Exploits1References8
NVD
NVD
added 2014/05/27 1:55 p.m.10 views

CVE-2014-3840

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

3.5CVSS5.4AI score0.01071EPSS
Exploits1References8
Prion
Prion
added 2014/05/27 1:55 p.m.13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...

3.5CVSS5.6AI score0.01071EPSS
Exploits1References8Affected Software1
Rows per page
Query Builder