5 matches found
CVE-2024-28867
Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies un-sanitized string values into metric names or labels, an attacker could make use of this and send a ?lang query parameter containing newlines, or similar...
Privilege Escalation
MariaDB is vulnerable to Privilege Escalation. The vulnerability exists due to a lack of sanitization of a user-supplied string before using it as a format specifier...
CVE-2021-29643
PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...
Cross site scripting
PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance...
CVE-2021-29643
CVE-2021-29643 affects Paessler PRTG Network Monitor prior to 21.3.69.1333. The issue is a stored cross-site scripting (XSS) vulnerability arising from an unsanitized string imported from a User Object in a connected Active Directory instance. Impact is stored XSS in the browser context, enabling...