Show filters
2,143 Total Results
Displaying 121-130 of 2,143
Sort by:
Attacker Value
Unknown
CVE-2024-45452
Disclosure Date: September 17, 2024 (last updated September 26, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1.
0
Attacker Value
Unknown
CVE-2024-45451
Disclosure Date: September 17, 2024 (last updated September 25, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Roseta allows Stored XSS.This issue affects Roseta: from n/a through 1.3.0.
0
Attacker Value
Unknown
CVE-2024-44050
Disclosure Date: September 17, 2024 (last updated September 25, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Verbosa allows Stored XSS.This issue affects Verbosa: from n/a through 1.2.3.
0
Attacker Value
Unknown
CVE-2024-8945
Disclosure Date: September 17, 2024 (last updated September 26, 2024)
A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unknown code of the file /index.php/dashboard/save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
0
Attacker Value
Unknown
CVE-2024-46958
Disclosure Date: September 16, 2024 (last updated September 21, 2024)
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.
0
Attacker Value
Unknown
CVE-2024-44058
Disclosure Date: September 15, 2024 (last updated September 24, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1.
0
Attacker Value
Unknown
CVE-2024-44057
Disclosure Date: September 15, 2024 (last updated September 24, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.
0
Attacker Value
Unknown
CVE-2024-44056
Disclosure Date: September 15, 2024 (last updated September 24, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2.
0
Attacker Value
Unknown
CVE-2024-44054
Disclosure Date: September 15, 2024 (last updated September 24, 2024)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8.
0
Attacker Value
Unknown
CVE-2024-45406
Disclosure Date: September 09, 2024 (last updated September 14, 2024)
Craft is a content management system (CMS). Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input.
0
