Lucene search
+L

4578 matches found

osv_cve
osv_cve
•added 2023/03/03 7:15 a.m.•12 views

CVE-2023-0578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS.This issue affects Book Cites: before 23.01.05...

6.1CVSS6.3AI score0.00366EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/03 7:15 a.m.•22 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS.This issue affects Book Cites: before 23.01.05...

5.8CVSS6.1AI score0.00366EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/03/03 6:57 a.m.•28 views

CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

6.1CVSS6.3AI score0.00366EPSS
SaveExploits0References2
CVE
CVE
•added 2023/03/03 6:57 a.m.•64 views

CVE-2023-0578

CVE-2023-0578 describes a Cross-Site Scripting (XSS) vulnerability in ASOS Information Technologies’ Book Cites, affecting versions before 23.01.05. The issue arises from improper neutralization of input during web page generation, enabling injection of malicious script into web pages viewed by o...

6.1CVSS6.4AI score0.00366EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/03 6:57 a.m.•9 views

CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

6.1CVSS6.4AI score0.00366EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/03/03 6:55 a.m.•15 views

CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

6.1CVSS6.4AI score0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/03/03 6:55 a.m.•35 views

CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

6.1CVSS6.3AI score0.00366EPSS
SaveExploits0References2
CVE
CVE
•added 2023/03/03 6:55 a.m.•66 views

CVE-2023-0577

CVE-2023-0577 involves ASOS Information Technologies’ SOBIAD before version 23.02.01. The root cause is improper neutralization of input during web page generation, resulting in a Cross-site Scripting (XSS) vulnerability. Affected component is SOBIAD’s input handling/rendering path prior to 23.02...

6.1CVSS6.4AI score0.00366EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/03 12:00 a.m.•14 views

PT-2023-16378

Name of the Vulnerable Software and Affected Versions ASOS Information Technologies SOBIAD versions prior to 23.02.01 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Cross-Site Scripting XSS...

6.1CVSS6.4AI score0.00366EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/03 12:00 a.m.•4 views

CVE-2023-0578: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

6.1CVSS5.8AI score0.00366EPSS
SaveExploits0References4
NVD
NVD
•added 2023/03/02 9:15 a.m.•30 views

CVE-2021-45478

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.5AI score0.00585EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/02 9:15 a.m.•30 views

CVE-2021-45479

Improper Neutralization of Input During Web Page Generation vulnerability in Yordam Information Technologies Library Automation System allows Stored XSS. This issue affects Library Automation System: before 19.2...

5.4CVSS5.5AI score0.00352EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/02 9:15 a.m.•29 views

CVE-2021-45477

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.5AI score0.00585EPSS
SaveExploits0References2
Prion
Prion
•added 2023/03/02 9:15 a.m.•26 views

Input validation

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

4CVSS6.5AI score0.00585EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/03/02 9:15 a.m.•29 views

Input validation

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

4CVSS6.5AI score0.00585EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/03/02 8:30 a.m.•69 views

CVE-2021-45479

The CVE-2021-45479 vulnerability affects the Library Automation System by Yordam Information Technologies, with the component/issue arising from improper neutralization of input during web page generation, leading to Stored XSS in versions before 19.2. The practical impact is cross-site script ex...

5.4CVSS6.1AI score0.00352EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/03/02 8:30 a.m.•36 views

CVE-2021-45479 XSS in Yordam Library Automation System

Improper Neutralization of Input During Web Page Generation vulnerability in Yordam Information Technologies Library Automation System allows Stored XSS. This issue affects Library Automation System: before 19.2...

5.4CVSS5.7AI score0.00352EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/03/02 8:26 a.m.•46 views

CVE-2021-45478 IDOR in Yordam Library Automation System

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.7AI score0.00585EPSS
SaveExploits0References2
CVE
CVE
•added 2023/03/02 8:26 a.m.•68 views

CVE-2021-45478

CVE-2021-45478 affects Yordam Library Automation System (Bordam Information Technologies) prior to version 19.2. The root cause is improper handling of parameters that enables collection of data supplied by users (high confidentiality impact). Documents consistently describe this vulnerability as...

6.5CVSS6.6AI score0.00585EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/03/02 8:24 a.m.•45 views

CVE-2021-45477 IDOR in Yordam Library Automation System

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

6.5CVSS6.7AI score0.00585EPSS
SaveExploits0References2
Rows per page
Query Builder