8539 matches found
CVE-2020-35272: Improper Neutralization of Input During Web Page Generation
Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...
PT-2021-11744
Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Admin Portal, specifically in the Task and Description fields. This allows for potential malicio...
SourceCodester Employee Performance Evaluation System Cross-Site Scripting Vulnerability
SourceCodester Employee Performance Evaluation System is a Php-based website builder for employee performance management from SourceCodester, Inc. A cross-site scripting vulnerability exists in Employee Performance Evaluation System that originates in the Task and Description fields of the...
PT-2021-27532
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as r core task decref, r list delete, and r list...
OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03047)
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via a task...
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
Design/Logic Flaw
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936
OX App Suite (affected up to version 7.10.4) contains a cross-site scripting vulnerability that can be triggered via the subject of a task. The issue is documented under CVE-2021-23936 and is corroborated by multiple sources in the connected documents (CNVD/CVE entries, Red Hat advisory, CVE list...
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2021-23936: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via the subject of a task...
Open-xchange OX App Suite Cross-Site Script Vulnerability
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via a task...
PT-2021-15622
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for cross-site scripting XSS attacks via the subject of a task. This means an attacker could potentially inject malicious scripts into the task subject, which would then b...
task-manager (>=6.0.0, <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0, <=3.3.3)
flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: OSV:PYSEC-2021-91...
task-manager (>=6.0.0, <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0, <=3.3.3)
flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: OSV:GHSA-HH7M-RX4F-4VPV...
task-manager (>=6.0.0, <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0, <=3.3.3)
flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: GHSA-HH7M-RX4F-4VPV...
task-manager (>=6.0.0, <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0, <=3.3.3)
flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: MEND:CVE-2021-21241...
task-manager (>=6.0.0, <=6.3.0) potentially affected by CVE-2021-21241 via flask-security-too (>=3.3.0, <=3.3.3)
flask-security-too PYPI version =3.3.0, =6.0.0, =6.3.0 Source cves: CVE-2021-21241 Source advisory: SNYK:PYTHON-FLASKSECURITYTOO-1056906...
Mozilla Rust post-release reuse vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. futures-task crate before 0.3.6 for Rust contains a security vulnerability that can be exploited by an attacker to potentially cause use-after-free in the case of non-static types...
