CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Prion•added 2019/02/25 3:29 p.m.•36 views

Code injection

An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...

4.3CVSS5.9AI score0.00802EPSS

SaveExploits0References1Affected Software1

OSV•added 2019/02/25 3:29 p.m.•19 views

CVE-2019-9142

An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...

6.1CVSS6.4AI score0.00802EPSS

SaveExploits0References1

CVE•added 2019/02/25 3:00 p.m.•68 views

CVE-2019-9142

The CVE-2019-9142 issue affects b3log Symphony (Sym) prior to v3.4.7. The vulnerability is an XSS flaw exposed via userIntro and userNickname fields in processor/SettingsProcessor.java. Connections across multiple sources confirm the root cause is input handling in SettingsProcessor.java, leading...

6.1CVSS5.9AI score0.00802EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2019/02/25 3:00 p.m.•35 views

CVE-2019-9142

An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...

6AI score0.00802EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2019/02/25 12:00 a.m.•6 views

CVE-2019-9142: Improper Neutralization of Input During Web Page Generation

An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...

6.1CVSS5.8AI score0.00802EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by