Lucene search
+L

2734 matches found

OSV
OSV
added 2024/07/29 9:30 p.m.52 views

GHSA-P9F2-JG9W-CX69 Aim Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

6.1CVSS5.8AI score0.00282EPSS
SaveExploits1References3
NVD
NVD
added 2024/07/29 7:15 p.m.36 views

CVE-2024-6578

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

7.2CVSS0.00282EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/29 6:37 p.m.39 views

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

7.2CVSS0.00282EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/29 6:37 p.m.29 views

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

7.2CVSS6.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/07/29 6:37 p.m.22 views

CVE-2024-6578 Stored XSS in aimhubio/aim

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

7.2CVSS6.4AI score0.00282EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.4 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to version 17.6 and iPadOS prior to version 17.6, which originates from...

5.3CVSS5.2AI score0.01179EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.12 views

PT-2024-37732

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.19.3 Description A stored cross-site scripting XSS issue exists due to the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using...

7.2CVSS6.9AI score0.00282EPSS
SaveExploits1References10
NVD
NVD
added 2024/07/26 8:15 p.m.21 views

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

2.8CVSS0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/26 7:45 p.m.37 views

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

2.8CVSS0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/26 7:45 p.m.63 views

CVE-2024-4786

Based on the connected sources, CVE-2024-4786 concerns Lenovo Tab K10 and is described as an improper validation vulnerability that could allow a specially crafted application to keep the device on. The NVD/Red Hat entries reiterate this description without detailing affected software versions, e...

2.8CVSS3.9AI score0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/26 7:45 p.m.16 views

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

2.8CVSS7AI score0.00135EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.6 views

Lenovo Tab K10 信任管理问题漏洞

Lenovo Tab K10 is a smartphone from Lenovo China. The Lenovo Tab K10 suffers from a trust management issue vulnerability that originates from allowing specially designed applications to keep the device turned on...

2.8CVSS6.8AI score0.00135EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/25 12:0 a.m.26 views

TeamCity Server < 2024.7 Multiple Vulnerabilities

According to its its self-reported version number, the version of JetBrains TeamCity running on the remote host is a version prior to 2024.7 It is, therefore, affected by multiple vulnerabilities: - Access tokens could continue working after deletion or expiration CVE-2024-41827 - Parameters of t...

9.8CVSS5.5AI score0.00404EPSS
SaveExploits0References7
CNVD
CNVD
added 2024/07/25 12:0 a.m.7 views

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16721)

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to store XSS on the code inspection tab...

5.4CVSS6AI score0.00267EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/22 3:15 p.m.8 views

CVE-2024-41825

In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab...

5.4CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/22 2:50 p.m.65 views

CVE-2024-41825

CVE-2024-41825 affects JetBrains TeamCity prior to 2024.07. Public sources describe a stored cross-site scripting (XSS) vulnerability on the Code Inspection tab, enabling an attacker to inject script that persists in the UI. Reported impact is limited to confidentiality and integrity (per CVSS ve...

5.4CVSS4.7AI score0.00267EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/22 12:0 a.m.11 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to store XSS on the code inspection tab...

5.4CVSS5.9AI score0.00267EPSS
SaveExploits0References2
Lenovo
Lenovo
added 2024/07/09 1:26 p.m.3 views

Lenovo Tab K10 Vulnerability - Lenovo Support US

No description provided...

7AI score
SaveExploits0
Patchstack
Patchstack
added 2024/07/09 12:36 p.m.9 views

WordPress Squelch Tabs and Accordions Shortcodes plugin <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via tab Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Squelch Tabs and Accordions Shortcodes versions = 0.4.8...

6.4CVSS5.8AI score0.00337EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2024/07/06 2:58 a.m.4 views

SUSE CVE-2024-39480

In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy to insert the completed symbol into the command buffer. Unfortunately it passes the size of t...

5.1CVSS7.2AI score0.00271EPSS
SaveExploits0References13
Rows per page
Query Builder