Lucene search
+L

242 matches found

CNVD
CNVD
added 2024/04/17 12:0 a.m.10 views

MindsDB Cross-Site Scripting Vulnerability (CNVD-2024-26182)

MindsDB is an emerging low-code machine learning platform from MindsDB, Inc. MindsDB suffers from a cross-site scripting vulnerability. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...

6.1CVSS6.2AI score0.00371EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/15 10:15 p.m.29 views

CVE-2024-31651

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter...

6.1CVSS5.8AI score0.00435EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/04/12 12:0 a.m.9 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-17888)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.00503EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/04/12 12:0 a.m.36 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-17897)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.00503EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.7 views

IBM QRadar SIEM 跨站脚本漏洞

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

5.4CVSS6.6AI score0.0034EPSS
SaveExploits1References3
CNVD
CNVD
added 2024/03/22 12:0 a.m.41 views

OneBlog Lab Module Cross-Site Scripting Vulnerability

OneBlog is a Java blog. OneBlog v2.3.4 version of a cross-site scripting vulnerability , the vulnerability stems from the Lab module under the Category List parameter of the user-supplied data lack of effective filtering and escaping , an attacker can exploit the vulnerability by injecting a...

6.1CVSS6.7AI score0.00375EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.6 views

PT-2024-11732 · Unknown · Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Online Flight Booking Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter in the add-airline form. This enables the execution...

6.1CVSS8AI score0.00386EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:2 a.m.41 views

BIT-PHPLIST-2020-36398

A stored cross site scripting XSS vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "Campaign" field under the "Send a campaign" module...

5.4CVSS5.6AI score0.00522EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/02/14 12:0 a.m.29 views

CVE-2024-25221

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

6AI score0.00413EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/01/02 12:0 a.m.5 views

CVE-2020-26623

SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the AdministrationWidget tab after the login portal...

5.2AI score0.00662EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.15 views

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . Cacti versions prior to 1.2.26 cross-site scripting vulnerability ,...

5.4CVSS6.7AI score0.01481EPSS
SaveExploits1References7
OSV
OSV
added 2023/12/15 11:15 a.m.5 views

CVE-2023-48559

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.9 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10097294)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.24 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-0321874)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.29 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-101466)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.32 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10147416)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00562EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.6 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-0298598)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.10 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-02979)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.2AI score0.00562EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.18 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10146927)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.1AI score0.00597EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/12/15 12:0 a.m.44 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-10112855)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7.5AI score0.00562EPSS
SaveExploits0References1
Rows per page
Query Builder