Show filters
182 Total Results
Displaying 31-40 of 182
Sort by:
Attacker Value
Unknown

CVE-2023-27150

Disclosure Date: December 26, 2023 (last updated January 04, 2024)
openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.
Attacker Value
Unknown

CVE-2023-48652

Disclosure Date: December 25, 2023 (last updated December 29, 2023)
Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete_all/submit. An attacker can force an admin user to delete server report logs on a web application to which they are currently authenticated.
Attacker Value
Unknown

CVE-2023-40817

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
Attacker Value
Unknown

CVE-2023-40816

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
Attacker Value
Unknown

CVE-2023-40815

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
Attacker Value
Unknown

CVE-2023-40814

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
Attacker Value
Unknown

CVE-2023-40813

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
Attacker Value
Unknown

CVE-2023-40812

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
Attacker Value
Unknown

CVE-2023-40810

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
Attacker Value
Unknown

CVE-2023-40809

Disclosure Date: November 18, 2023 (last updated November 23, 2023)
OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.