Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2025/10/30 4:8 p.m.2 views

CVE-2025-62712 JumpServer Connection Token Leak Vulnerability

JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint...

9.6CVSS6.3AI score0.00097EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-46390

Malicious code in bioql PyPI...

9.1CVSS9.2AI score0.00242EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:15 p.m.6 views

CVE-2022-3731

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

9.8CVSS7.5AI score0.00189EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:17 a.m.5 views

CVE-2015-2197

Cross-site scripting XSS vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API...

3.5CVSS5.5AI score0.00209EPSS
Exploits0References1
OSV
OSV
added 2022/10/28 8:15 a.m.1 views

CVE-2022-3731

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

9.8CVSS5.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/04/03 12:0 a.m.20 views

Fedora 20 : drupal7-entity-1.6-1.fc20 (2015-2826)

7.x-1.6 See SA-CONTRIB-2015-053 - Entity API - Cross Site Scripting XSS Changes since 7.x-1.5 : - by klausi: Sanitize field labels before passing them to the Token API. - Issue 2264079 by Amitaibu, fago: Fixed $wrapper-access might be wrong for single entity reference field. - Issue 2039601 by...

5.5AI score
Exploits0References3
NVD
NVD
added 2015/03/03 7:59 p.m.14 views

CVE-2015-2197

Cross-site scripting XSS vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API...

3.5CVSS5.3AI score0.00209EPSS
Exploits0References3
Prion
Prion
added 2015/03/03 7:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API...

3.5CVSS5.7AI score0.00209EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder