Lucene search
+L

6518 matches found

OSV
OSV
•added 2022/12/05 12:00 a.m.•27 views

CVE-2022-43706

Cross-site scripting XSS vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules to inject arbitrary script or HTML that may be executed in Web UI for other logged in users...

5.4CVSS5.8AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/05 12:00 a.m.•0 views

CVE-2022-43706: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules to inject arbitrary script or HTML that may be executed in Web UI for other logged in users...

5.4CVSS5.8AI score0.004EPSS
SaveExploits0References3
Oracle linux
Oracle linux
•added 2022/11/22 12:00 a.m.•44 views

pcs security update

0.11.3-4 - Fixed ruby socket permissions - Resolves: rhbz2116841 0.11.3-3 - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether /etc/booth exists - Resolves: rhbz2026725 rhbz2058243 0.11.3-2 - Fixed 'pcs resource restart' traceback - Resolves: rhbz2102663 0.11.3-1 -...

8.8CVSS1.2AI score0.01969EPSS
SaveExploits1
OSV
OSV
•added 2022/11/17 5:15 p.m.•14 views

CVE-2022-38390

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS5.4AI score0.00396EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/17 5:15 p.m.•27 views

CVE-2022-38390

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS0.00396EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/17 5:15 p.m.•32 views

Cross site scripting

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

4.9CVSS5.3AI score0.00396EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•2 views

CVE-2022-38390: Improper Neutralization of Input During Web Page Generation

Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

5.4CVSS5.7AI score0.00396EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/15 9:15 p.m.•30 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688...

4.9CVSS5.2AI score0.00389EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/11/14 8:15 p.m.•35 views

CVE-2022-34317

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

5.4CVSS0.00526EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/14 8:15 p.m.•24 views

Cross site scripting

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

4.9CVSS5.2AI score0.00526EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2022/11/14 7:15 p.m.•39 views

CVE-2022-34315

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

5.4CVSS0.00526EPSS
SaveExploits0References3
OSV
OSV
•added 2022/11/14 7:15 p.m.•14 views

CVE-2022-34315

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

5.4CVSS5.4AI score0.00526EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/14 7:15 p.m.•31 views

Cross site scripting

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

4.9CVSS5.2AI score0.00526EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/11/14 7:10 p.m.•73 views

CVE-2022-34317

IBM CICS TX 11.1 is affected by CVE-2022-34317, a cross-site scripting vulnerability in the Web UI that can permit arbitrary JavaScript execution and potentially credentials disclosure within a trusted session. Root cause: improper input handling in the Web UI. Impact is UI-level, with potential ...

5.4CVSS5.2AI score0.00526EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/11/14 7:10 p.m.•43 views

CVE-2022-34317 IBM CICS TX cross-site scripting

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

5.4CVSS5.3AI score0.00526EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/11/14 6:18 p.m.•48 views

CVE-2022-34315 IBM CICS TX cross-site scripting

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

5.4CVSS5.3AI score0.00526EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•1 views

CVE-2022-34315: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451...

5.4CVSS5.7AI score0.00526EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•2 views

CVE-2022-34317: Improper Neutralization of Input During Web Page Generation

IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459...

5.4CVSS5.7AI score0.00526EPSS
SaveExploits0References3
NVD
NVD
•added 2022/11/11 7:15 p.m.•16 views

CVE-2022-40750

IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS0.00396EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/11 7:15 p.m.•33 views

CVE-2022-36776

IBM Cloud Pak for Security CP4S 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS0.00397EPSS
SaveExploits0References2
Rows per page
Query Builder