Show filters
733 Total Results
Displaying 191-200 of 733
Sort by:
Attacker Value
Unknown
CVE-2022-24387
Disclosure Date: March 14, 2022 (last updated February 23, 2025)
With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010
0
Attacker Value
Unknown
CVE-2022-24385
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
0
Attacker Value
Unknown
CVE-2022-24386
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
0
Attacker Value
Unknown
CVE-2022-24384
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
0
Attacker Value
Unknown
CVE-2021-46708
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
0
Attacker Value
Unknown
CVE-2018-25031
Disclosure Date: March 11, 2022 (last updated February 23, 2025)
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others.
0
Attacker Value
Unknown
CVE-2021-41657
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack.
0
Attacker Value
Unknown
CVE-2022-23907
Disclosure Date: February 28, 2022 (last updated February 23, 2025)
CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
0
Attacker Value
Unknown
CVE-2022-23906
Disclosure Date: February 28, 2022 (last updated February 23, 2025)
CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
0
Attacker Value
Unknown
CVE-2022-0360
Disclosure Date: February 28, 2022 (last updated February 23, 2025)
The Easy Drag And drop All Import : WP Ultimate CSV Importer WordPress plugin before 6.4.3 does not sanitise and escaped imported comments, which could allow high privilege users to import malicious ones (either intentionnaly or not) and lead to Stored Cross-Site Scripting issues
0
