5962 matches found
Cross site scripting
A stored cross-site scripting XSS vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors...
CVE-2022-33075
A stored cross-site scripting XSS vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors...
CVE-2022-33075: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors...
Cross site scripting
A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...
CVE-2022-33043
A cross-site scripting XSS vulnerability in the batch add function of Urtracker Premium v4.0.1.1477 allows attackers to execute arbitrary web scripts or HTML via a crafted excel file...
CVE-2022-33009
A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...
CVE-2022-33005
Delta Electronics DIAEnergie v1.08.00 contains an XSS vulnerability in the System Settings/IOT Settings module, exploitable via a crafted payload in the Name field. The issue is described across multiple sources (including CVE-2022-33005 entries and Red Hat advisory) as a cross-site scripting fla...
CVE-2022-33005: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...
CVE-2022-33009: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...
Cross site scripting
A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...
Cross-site Scripting in Jfinal CMS
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...
Design/Logic Flaw
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
CVE-2022-33113
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Malicious Package
Overview web-scripts-monorepo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
CVE-2022-33113: Improper Neutralization of Input During Web Page Generation
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Malicious code in web-scripts-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42d2a82508d83227e172fae45ff15eb9a366f79d518d84ef65b1620dbe7b7d67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7075 Malicious code in web-scripts-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42d2a82508d83227e172fae45ff15eb9a366f79d518d84ef65b1620dbe7b7d67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
