Lucene search
+L

27443 matches found

CNVD
CNVD
added 2024/08/09 12:0 a.m.57 views

Microweber add_tagging_tagged.php file cross-site scripting vulnerability

Microweber is Microweber open source can provide drag and drop functionality of the online store management system . The system includes adding products , images and other modules. microweber version 2.0.16 cross-site scripting vulnerability , the vulnerability stems from...

6.1CVSS6.6AI score0.00307EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/06 3:30 p.m.58 views

GHSA-M99V-MMG2-66VF Microweber Reflected Cross-site scripting (XSS) vulnerability

A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...

6.1CVSS6AI score0.00903EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
added 2024/08/06 12:0 a.m.19 views

CVE-2024-40101

A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...

6.2AI score0.00903EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.8 views

TOTOLINK EX200 安全漏洞

The TOTOLINK EX200 is a 2.4G wireless N range extender designed to extend the coverage of existing Wi-Fi networks. A buffer overflow vulnerability exists in the TOTOLINK EX200. The vulnerability originates from the function loginauth in the /cgi-bin/cstecgi.cgi file, which operates on the paramet...

9CVSS7.3AI score0.0127EPSS
SaveExploits1References5
CNVD
CNVD
added 2024/07/19 12:0 a.m.47 views

SAP CRM Cross-Site Scripting Vulnerability (CNVD-2024-36347)

SAP CRM is a customer relationship management system from SAP, Germany. SAP CRM suffers from a cross-site scripting vulnerability that stems from custom CSS support options that do not adequately encode user-controlled input, which can be exploited by an attacker to execute arbitrary web script o...

6.1CVSS6.3AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/09 12:0 a.m.16 views

CVE-2024-40734

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/front-ports/add/...

6.1CVSS5.7AI score
SaveExploits0References3
OSV
OSV
added 2024/07/09 12:0 a.m.15 views

CVE-2024-40739

A cross-site scripting XSS vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter at /dcim/power-feeds/add...

6.1CVSS5.7AI score
SaveExploits0References3
CNVD
CNVD
added 2024/07/05 12:0 a.m.14 views

SimpCMS Cross-Site Scripting Vulnerability

SimpCMS is an easy-to-use CMS based on PureEdit. A cross-site scripting vulnerability exists in SimpCMS version 0.1, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary web script or HTML via a...

5.4CVSS6.2AI score0.00743EPSS
SaveExploits3References1
CNVD
CNVD
added 2024/06/28 12:0 a.m.14 views

Moodle Cross-Site Scripting Vulnerability (CNVD-2024-48100)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied...

6.1CVSS6.4AI score0.00804EPSS
SaveExploits2References1
NVD
NVD
added 2024/06/26 8:15 p.m.22 views

CVE-2024-39242

A cross-site scripting XSS vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using evalString.fromCharCode...

6.1CVSS0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/26 7:15 a.m.8 views

CVE-2024-5215

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6AI score0.00406EPSS
SaveExploits0References6
NVD
NVD
added 2024/06/20 9:15 p.m.20 views

CVE-2024-30848

Cross-site scripting XSS vulnerability in SilverSky E-mail service version 5.0.3126 allows remote attackers to inject arbitrary web script or HTML via the version parameter...

6.1CVSS0.00331EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.26 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-30837)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7AI score0.00385EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.17 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-33386)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.9AI score0.00448EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.11 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-28610)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.9AI score0.00587EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.6 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-30051)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7AI score0.00479EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.34 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-33255)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.1AI score0.00502EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.30 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-29659)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

4.8CVSS7AI score0.00587EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.22 views

Unspecified Vulnerability in Adobe Experience Manager (CNVD-2024-28510)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS6.9AI score0.00717EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/18 12:0 a.m.24 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-30836)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS7AI score0.00738EPSS
SaveExploits0References1
Rows per page
Query Builder