Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/03/28 4:59 p.m.•23 views

CVE-2026-33284

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches...

5.1CVSS6.1AI score0.00203EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/27 3:16 p.m.•29 views

CVE-2026-33284

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches...

5.1CVSS0.00203EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/27 1:58 p.m.•21 views

EUVD-2026-16614

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches...

5.1CVSS6.1AI score0.00203EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/27 1:58 p.m.•10 views

CVE-2026-33284

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches...

5.1CVSS6.1AI score0.00203EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2026/03/27 1:58 p.m.•49 views

CVE-2026-33284

GlobaLeaks (free/open-source whistleblowing software) is affected prior to version 5.0.89. The /api/support endpoint performs minimal validation on user-submitted support requests, allowing arbitrary URLs to be included in support emails sent to administrators. Version 5.0.89 patches the issue. E...

5.1CVSS6.1AI score0.00203EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•28 views

EUVD-2021-21848

Malware in sbrugna...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 7:53 p.m.•23 views

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/09/30 6:15 p.m.•23 views

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/09/30 6:15 p.m.•14 views

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/30 12:00 a.m.•22 views

Netscout NgeniusOne cross-site scripting vulnerability

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE version 6.3.0 build 1196, which stems from a lack of validation of user input and filtering of input data at the...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/30 12:00 a.m.•12 views

CVE-2021-35204: Improper Neutralization of Input During Web Page Generation

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/09/30 12:00 a.m.•8 views

PT-2021-20836

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue concerns a Reflected Cross-Site Scripting XSS flaw in the support endpoint. This allows for malicious scripts to be injected and executed, potentially leading to...

5.4CVSS0.00466EPSS
SaveExploits0References4
Rows per page
Query Builder