Lucene search
+L

4 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-29934

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.0059EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/24 5:15 p.m.37 views

CVE-2023-26060

An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side template injection payload. Input validation is missing during creation of the working set. For an external attacker, it is very difficult t...

8.8CVSS7.3AI score0.0059EPSS
SaveExploits0References2
Prion
Prion
added 2023/04/24 5:15 p.m.28 views

Input validation

An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side template injection payload. Input validation is missing during creation of the working set. For an external attacker, it is very difficult t...

6.5CVSS8.7AI score0.0059EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/10 12:0 a.m.19 views

PT-2022-04: Cross Site Template Injection (CSTI)

Input validation was missing while creating the working set, in working set manager application. Nokia NetAct users can create a Working Set with a name that injects a client-side template Injection payloads. The attack can only be performed by an internal user. The vulnerability is fixed in NetA...

8.8CVSS7.7AI score0.0059EPSS
SaveExploits0
Rows per page
Query Builder