Lucene search
K

8 matches found

EUVD
EUVD
added 2025/12/18 9:31 p.m.2 views

EUVD-2025-204347

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls...

5.3CVSS5.5AI score0.0004EPSS
Exploits0References3
OSV
OSV
added 2025/12/18 8:15 p.m.0 views

CVE-2019-25230

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls...

4.3CVSS5.6AI score0.0004EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/18 7:53 p.m.21 views

CVE-2019-25230 Kentico Xperience <= 12.0.0 User Widget Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows authenticated users to view sensitive system objects through the live site widget properties dialog. Attackers can exploit this vulnerability to access unauthorized system information without proper access controls...

5.3CVSS0.0004EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.1 views

Kentico Xperience 安全漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from an information disclosure vulnerability that originates in the Live Site Part Properties dialog box that could disclose sensitive system objects and can be exploited by an attacker to cause unauthorize...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2010/07/08 12:54 p.m.19 views

CVE-2010-2659

Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...

4.3CVSS7.2AI score0.00657EPSS
Exploits0References6
Prion
Prion
added 2010/07/08 12:54 p.m.15 views

Code injection

Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...

4.3CVSS6.5AI score0.00657EPSS
Exploits0References6Affected Software1
Opera Security Advisories
Opera Security Advisories
added 2010/06/29 12:0 a.m.3 views

Widget properties exposed to third party domains – Opera Security Advisories

Widget properties exposed to third party domains – Opera Security Advisories OPCOM Team | June 29, 2010 Severity Moderately severe Description In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration optio...

5.7AI score
Exploits0References1
Opera Security Advisories
Opera Security Advisories
added 2010/06/29 12:0 a.m.12 views

Widget properties exposed to third party domains

In some cases, widget properties could be exposed to third party domains, leading to the possibility of leak of widget information, or configuration options for the widget...

1.6AI score
Exploits0Affected Software1
Rows per page
Query Builder