#cwe-79
共收录 6044 条相关情报。
← 返回所有主题 漏洞预警2023-05-09 发布MEDIUM
CVE-2023-30741
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an
来源摘录 · NVD
漏洞预警2023-04-24 发布MEDIUM
CVE-2022-45084
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.
来源摘录 · NVD
漏洞预警2023-04-18 发布MEDIUM
CVE-2022-45836
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.
来源摘录 · NVD
漏洞预警2023-04-18 发布MEDIUM
CVE-2022-45839
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.
来源摘录 · NVD
漏洞预警2023-04-16 发布MEDIUM
CVE-2022-43480
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versi
来源摘录 · NVD
漏洞预警2023-04-06 发布MEDIUM
CVE-2023-23815
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Tag Map plugin <= 17.0
来源摘录 · NVD
漏洞预警2023-03-14 发布MEDIUM
CVE-2022-23791
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software
来源摘录 · NVD
漏洞预警2023-03-14 发布MEDIUM
CVE-2022-23790
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software
来源摘录 · NVD
漏洞预警2023-03-06 发布MEDIUM
CVE-2022-2178
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer St
来源摘录 · NVD
漏洞预警2023-03-01 发布MEDIUM
CVE-2023-0507
Grafana is an open-source platform for monitoring and observability.
Starting with the 8.1 branch, Grafana had a store
来源摘录 · NVD
漏洞预警2023-02-18 发布MEDIUM
CVE-2023-0902
A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This
来源摘录 · NVD
漏洞预警2023-02-14 发布MEDIUM
CVE-2023-24521
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 7
来源摘录 · NVD
漏洞预警2023-02-14 发布MEDIUM
CVE-2023-0025
SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which
来源摘录 · NVD
漏洞预警2023-02-12 发布MEDIUM
CVE-2022-45091
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy
来源摘录 · NVD
漏洞预警2023-02-01 发布MEDIUM
CVE-2023-0606
Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.
来源摘录 · NVD
漏洞预警2023-01-27 发布LOW
CVE-2022-39324
Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user
来源摘录 · NVD
漏洞预警2023-01-27 发布MEDIUM
CVE-2022-23552
Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions
来源摘录 · NVD
漏洞预警2021-10-26 发布MEDIUM
CVE-2021-41184
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option
来源摘录 · NVD
漏洞预警2020-04-29 发布MEDIUM
CVE-2020-11022
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one
来源摘录 · NVD
漏洞预警2019-05-28 发布MEDIUM
CVE-2019-0221
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided
来源摘录 · NVD