CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

PT-2023-27543 · Openknowledgemaps · Openknowledgemaps Head Start

Name of the Vulnerable Software and Affected Versions: OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 Visual Project Explorer version 1.0 Description: A reflected cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in the web browser of a user. This is achieve...

CVE-2023-40618: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

CVE-2023-40618

CVE-2023-40618 is a reflected XSS affecting OpenKnowledgeMaps Head Start (versions 4–7) and Visual Project Explorer 1.0. The vulnerability arises from handling of the ‘service’ parameter in the headstart_snapshot.php endpoint, allowing remote attackers to inject JavaScript into a user session. Do...

Head Start Cross-Site Scripting Vulnerability

Head Start is a web-based knowledge mapping software open-sourced by Open Knowledge Maps. Designed to give researchers a head start on literature reviews hence the name. A security vulnerability exists in Open Knowledge Maps Head Start, Visual Project Explorer version 1.0. An attacker exploited t...

CLSA-2023-1695063978 Fix CVE(s): CVE-2023-4735, CVE-2023-4733

SECURITY UPDATE: Use-after-free in doecmd - debian/patches/CVE-2023-4733.patch: Verify oldwin pointer after resetVIsual - CVE-2023-4733 SECURITY UPDATE: Potential OOB write in doaddsub - debian/patches/CVE-2023-4735.patch: Don't overflow buf2, check size in for loop - CVE-2023-4735...

CLSA-2023-1695063445 vim: Fix of CVE-2023-4733

CVE-2023-4733: verify oldwin pointer after resetVIsual...

CLSA-2023-1695063163 vim: Fix of CVE-2023-4733

CVE-2023-4733: verify oldwin pointer after resetVIsual...

Microsoft Visual Studio Code Remote Code Execution Vulnerability (CNVD-2023-72223)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in Microsoft Visual Studio Code, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2023-101685)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Microsoft Visual Studio Multiple Vulnerabilities-02 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Visual Studio Multiple Vulnerabilities-04 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Visual Studio Multiple Vulnerabilities-01 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Visual Studio Multiple Vulnerabilities-03 (Sep 2023)

This host is missing an important security update according to Microsoft Security Update September-2023. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...