PT-2023-22766

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 24.0.11 Nextcloud Server versions prior to 25.0.5 Nextcloud Enterprise Server versions prior to 21.0.9.11 Nextcloud Enterprise Server versions prior to 22.2.10.11 Nextcloud Enterprise Server versions prior to...

SUSE CVE-2011-3593

A certain Red Hat patch to the vlanhwacceldoreceive function in net/8021q/vlancore.c in the Linux kernel 2.6.32 on Red Hat Enterprise Linux RHEL 6 allows remote attackers to cause a denial of service system crash via priority-tagged VLAN frames...

SUSE CVE-2020-12059

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception...

Stored DOM-based Cross-site Scripting in Tags Functionality

Description A stored, DOM-based cross-site scripting vulnerability exists in answer version 1.0.4 within the question tagging functionality. Steps Step 1. Log in. Step 2. Proceed to create a new question. Populate the Title and Body input. Step 3. Click on the Add tag button, shown in the followi...

Mayan EDMS DMS XSS vulnerability

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

GHSA-5M6V-2XGF-QHRW Mayan EDMS DMS XSS vulnerability

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

PYSEC-2023-276

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

Cross site scripting

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

PYSEC-2023-276

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419 Mayan EDMS Tag XSS

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419 Mayan EDMS Tag XSS

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419 Mayan EDMS Tag XSS

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

CVE-2022-47419

CVE-2022-47419 affects Mayan EDMS DMS with a reflected XSS in the in-product tagging system. The CVSS 3.1 base score is 5.4 (MEDIUM) with network attack vector, low attack complexity, require low privileges and user interaction. Exploitation observed per GHSA-5M6V-2XGF-QHRW and OSV details; no au...

CVE-2022-47419: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system...

PT-2023-8985

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Workspace DMS affected versions not specified Mayan EDMS DMS affected versions not specified Description The issue is related to a stored cross-site scripting XSS condition. This occurs when a malicious document provided by an...

PT-2023-15299

Name of the Vulnerable Software and Affected Versions Mayan EDMS affected versions not specified Description An XSS issue was discovered in the Mayan EDMS DMS, where successful exploitation was observed in the in-product tagging system. Recommendations At the moment, there is no information about...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from the fact that it allows link tagging without validation, which could be exploited by an attacker to implement cross-si...

Implement Risk-Based Vulnerability Management with Qualys TruRisk™ : Part 1

For today’s CISOs, managing cyber risk is Job 1 priority, and it’s a full-time concern. Security practitioners are spending a considerable amount of time responding to cybersecurity threats and finding ways to reduce risk from threats that are unknown. Earlier this year Qualys introduced Qualys...