Lucene search
+L

373 matches found

CNNVD
CNNVD
•added 2022/01/13 12:00 a.m.•15 views

Phoronix Test Suite 跨站请求伪造漏洞

Phoronix Test Suite is a Phoronix Test Suite open source, cross-platform automated testing/benchmarking software. Phoronix Test Suite suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that a request is coming from a trusted...

8.8CVSS6.8AI score0.0081EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/01/13 12:00 a.m.•16 views

Phoronix Test Suite 跨站请求伪造漏洞

Phoronix Test Suite is a Phoronix Test Suite open source, cross-platform automated testing/benchmarking software. Phoronix Test Suite suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that a request is coming from a trusted...

8.8CVSS6.5AI score0.00736EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/01/10 4:15 p.m.•11 views

CVE-2022-0157

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.2AI score0.01081EPSS
SaveExploits1References7
NVD
NVD
•added 2022/01/10 4:15 p.m.•27 views

CVE-2022-0157

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS0.01081EPSS
SaveExploits1References4
Prion
Prion
•added 2022/01/10 4:15 p.m.•13 views

Cross site scripting

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.5AI score0.01081EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/01/10 4:15 p.m.•28 views

CVE-2022-0157

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.4AI score0.01081EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/10 4:15 p.m.•10 views

UBUNTU-CVE-2022-0157

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.8AI score0.01081EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/10 3:25 p.m.•1 views

CVE-2022-0157

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.9CVSS0.01081EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2022/01/10 3:25 p.m.•42 views

CVE-2022-0157 Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.2CVSS7.1AI score0.01081EPSS
SaveExploits1References4
CVE
CVE
•added 2022/01/10 3:25 p.m.•89 views

CVE-2022-0157

CVE-2022-0157 affects the Phoronix Test Suite (phoronix-test-suite). Public documents in connected feeds describe it as an "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)" vulnerability. The Mageia advisory and OSV/OpenSource feeds confirm this CVE and referenc...

5.4CVSS6.5AI score0.01081EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/10 3:25 p.m.•23 views

CVE-2022-0157 Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.2CVSS5.7AI score
SaveExploits0References6
Huntr
Huntr
•added 2022/01/10 2:34 p.m.•22 views

Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite

Description Hello phoronix test suite maintainer team, there is a Cross site request forgery vulnerability in phoronix test suite. Proof of Concept 1. Install phoronix test suite on your system 2. Create a test suite 3. Open another tab in browser and go to the link /?localsuites/delete/-1.0.0, f...

6.8CVSS0.3AI score0.00736EPSS
SaveExploits1
Huntr
Huntr
•added 2022/01/10 3:59 a.m.•25 views

Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite

Description Hi there, I would like to report a Cross Site Request Forgery in phoronix source code. Cross-site request forgery also known as CSRF is a web security vulnerability that allows an attacker to induce users to perform actions that they do not intend to perform. It allows an attacker to...

6.8CVSS1AI score0.0081EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/10 12:00 a.m.•0 views

CVE-2022-0157: Improper Neutralization of Input During Web Page Generation

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.8AI score0.01081EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/10 12:00 a.m.•14 views

Phoronix Test Suite 跨站脚本漏洞

Phoronix Test Suite is a Phoronix Test Suite open source, cross-platform automated test/benchmarking software. A cross-site scripting vulnerability exists in Phoronix Test Suite, which stems from a susceptibility to incorrect input when generating Web pages...

5.4CVSS6AI score0.01081EPSS
SaveExploits1References6
Huntr
Huntr
•added 2022/01/04 1:00 a.m.•25 views

Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite

Description Hi there phoronix test suite maintainer team. There is a stored XSS in phoronix-test-suite source code. This is in group name. Proof of Concept 1. Install a local instance of phoronix test suite 2. Create an account and log in, then create a group with name . Note that you cannot crea...

3.5CVSS6.5AI score0.01081EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•2 views

PT-2022-13000

Name of the Vulnerable Software and Affected Versions phoronix-test-suite affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly handle user...

5.4CVSS0.01081EPSS
SaveExploits1References20
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•2 views

PT-2022-13030

Name of the Vulnerable Software and Affected Versions phoronix-test-suite affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is...

8.8CVSS0.0081EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•2 views

PT-2022-13029

Name of the Vulnerable Software and Affected Versions phoronix-test-suite affected versions not specified Description The phoronix-test-suite is vulnerable to Cross-Site Request Forgery CSRF. This issue allows an attacker to perform unauthorized actions on the victim's behalf. Recommendations At...

8.8CVSS0.00736EPSS
SaveExploits1References20
RedHat Linux
RedHat Linux
•added 2021/11/09 5:54 p.m.•13 views

python: Unsafe use of eval() on data retrieved via HTTP in the test suite

In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...

9.8CVSS7.2AI score0.08334EPSS
SaveExploits0References4
Rows per page
Query Builder