Lucene search
+L

2751 matches found

OSV
OSV
added 2022/11/11 12:0 a.m.25 views

CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting

A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...

3.5CVSS4.3AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/11/03 12:0 a.m.12 views

The vulnerability of Google Chrome’s user tabs allows a hacker to execute arbitrary code.

The vulnerability of user-side tabs in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.00631EPSS
SaveExploits0References9Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/10/18 11:15 a.m.5 views

CVE-2022-3581

A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS4.4AI score0.00357EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/10/18 11:15 a.m.9 views

CVE-2022-3581

A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS4AI score0.00357EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/18 12:0 a.m.8 views

Cashier Queuing System 安全漏洞

Cashier Queuing System is a cashier queuing system by Carlo Montero Personal Developer. A security vulnerability exists in Cashier Queuing System version 1.0, which stems from an unknown functionality of the component Cashiers Tab, where manipulation of the parameter Name can lead to a cross-site...

6.1CVSS5.6AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/17 9:15 p.m.26 views

CVE-2022-40606

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...

6.1CVSS0.00445EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/17 9:15 p.m.24 views

Design/Logic Flaw

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...

5.8CVSS5.9AI score0.00445EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/10/17 8:15 p.m.24 views

Design/Logic Flaw

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...

5.8CVSS5.9AI score0.00445EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/10/17 12:0 a.m.21 views

CVE-2022-40605

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...

6.1CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/10/17 12:0 a.m.5 views

CVE-2022-40605

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606...

5.6AI score0.00445EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/17 12:0 a.m.23 views

CVE-2022-40606

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...

6.1CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/10/17 12:0 a.m.6 views

CVE-2022-40606

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...

5.6AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/17 12:0 a.m.38 views

CVE-2022-40606

MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605...

6AI score0.00445EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/15 10:15 a.m.9 views

CVE-2022-3519

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...

6.1CVSS3.9AI score0.00357EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/15 10:15 a.m.21 views

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...

5.8CVSS6AI score0.00357EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/15 12:0 a.m.6 views

PT-2022-22621 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System version 1.0 Description: A problematic issue was found in the Quote Requests Tab component, where the manipulation of the Manage Remarks argument leads to cross-site scripting. The attack can be...

6.1CVSS5.9AI score0.00357EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/10/15 12:0 a.m.37 views

CVE-2022-3519 SourceCodester Sanitization Management System Quote Requests Tab cross site scripting

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...

2.4CVSS6.2AI score0.00357EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/10 12:0 a.m.9 views

PT-2022-6441 · Nokia · Nokia Netact

Name of the Vulnerable Software and Affected Versions: Nokia NetAct versions prior to 22 FP2211 Description: The issue is related to insufficient protection of the web page structure when creating tasks. It allows an attacker to perform cross-site scripting XSS attacks by injecting scripts. The...

6.8CVSS5.4AI score0.00371EPSS
SaveExploits0References6
wpexploit
wpexploit
added 2022/10/10 12:0 a.m.95 views

Rock Convert < 2.11.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Go to the plugin's settings Popup tab, click on "C...

4.8CVSS0.1AI score0.00475EPSS
SaveExploits2
CNNVD
CNNVD
added 2022/09/27 12:0 a.m.9 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 106 that stems from insufficient policy enforcement in the Customization tab...

6.5CVSS7.5AI score0.00526EPSS
SaveExploits1References8
Rows per page
Query Builder