Lucene search
+L

7596 matches found

Cvelist
Cvelist
•added 2023/05/05 6:20 p.m.•46 views

CVE-2022-43866 IBM Maximo Asset Management cross-site scripting

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.3AI score0.00371EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/05 12:00 a.m.•4 views

CVE-2022-43866: Improper Neutralization of Input During Web Page Generation

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.7AI score0.00371EPSS
SaveExploits0References3
NVD
NVD
•added 2023/05/02 1:15 p.m.•24 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.2CVSS5.1AI score0.11237EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/05/02 12:00 a.m.•19 views

PT-2023-22412 · Asus · Asus Rt-Ac51U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC51U wireless router firmware versions up to and including 3.0.0.4.380.8591 Description: A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI allows remote attackers to inject...

5.2CVSS5.8AI score0.11237EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/05/02 12:00 a.m.•18 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.1AI score0.11237EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/02 12:00 a.m.•8 views

CVE-2023-29772: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.2CVSS5.8AI score0.11237EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/02 12:00 a.m.•78 views

CVE-2023-29772

Affected product/version: ASUS RT-AC51U wireless router firmware up to and including 3.0.0.4.380.8591. Vulnerability: Cross-site scripting (XSS) on the System Log/General Log page of the administrator web UI, allowing remote attackers to inject arbitrary web script or HTML via a malicious network...

5.2CVSS5AI score0.11237EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/05/02 12:00 a.m.•39 views

CVE-2023-29772

A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request...

5.3AI score0.11237EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/29 3:15 a.m.•42 views

CVE-2022-43871

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS4.8AI score0.00371EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/29 3:15 a.m.•30 views

Cross site scripting

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

4.9CVSS5.2AI score0.00371EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/04/29 2:42 a.m.•86 views

CVE-2022-43871

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is affected by a cross-site scripting vulnerability in the Web UI. The issue allows embedding arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Remediation per IBM Security Bulletin: install Fix Pac...

5.4CVSS4.8AI score0.00371EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/29 12:00 a.m.•7 views

CVE-2022-43871: Improper Neutralization of Input During Web Page Generation

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.7AI score0.00371EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/04/27 2:15 p.m.•7 views

CVE-2023-24966

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

6.1CVSS6AI score0.00399EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/27 2:15 p.m.•20 views

Cross site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.8CVSS5.8AI score0.00399EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/04/27 1:08 p.m.•28 views

CVE-2023-24966 IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

6.1CVSS6AI score0.00399EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-24966: Improper Neutralization of Input During Web Page Generation

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

6.1CVSS5.7AI score0.00399EPSS
SaveExploits0References2
NVD
NVD
•added 2023/04/07 2:15 p.m.•27 views

CVE-2022-43914

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036...

5.4CVSS4.8AI score0.00371EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/07 2:15 p.m.•25 views

Cross site scripting

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036...

4.9CVSS5.2AI score0.00371EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/04/07 1:26 p.m.•35 views

CVE-2022-43914 IBM TRIRIGA Application Platform cross-site scripting

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036...

4.6CVSS5.3AI score0.00371EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/07 12:00 a.m.•9 views

CVE-2022-43914: Improper Neutralization of Input During Web Page Generation

IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 241036...

5.4CVSS5.7AI score0.00371EPSS
SaveExploits0References2
Rows per page
Query Builder