Show filters
538 Total Results
Displaying 101-110 of 538
Sort by:
Attacker Value
Unknown
CVE-2023-44770
Disclosure Date: October 06, 2023 (last updated October 09, 2023)
A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.
0
Attacker Value
Unknown
CVE-2023-40201
Disclosure Date: October 03, 2023 (last updated October 09, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in FuturioWP Futurio Extra plugin <= 1.8.4 versions leads to activation of arbitrary plugin.
0
Attacker Value
Unknown
CVE-2023-43884
Disclosure Date: September 28, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter.
0
Attacker Value
Unknown
CVE-2023-43830
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.
0
Attacker Value
Unknown
CVE-2023-43828
Disclosure Date: September 27, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
0
Attacker Value
Unknown
CVE-2023-23845
Disclosure Date: September 13, 2023 (last updated October 08, 2023)
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
0
Attacker Value
Unknown
CVE-2023-23840
Disclosure Date: September 13, 2023 (last updated October 08, 2023)
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
0
Attacker Value
Unknown
CVE-2023-39578
Disclosure Date: August 28, 2023 (last updated October 08, 2023)
A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.
0
Attacker Value
Unknown
CVE-2023-32109
Disclosure Date: August 18, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.
0
Attacker Value
Unknown
CVE-2023-32108
Disclosure Date: August 18, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.
0
