CVE-2022-25413Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
5.4 MOYENNE
CVE-2022-25412Maxsite CMS v180 permet à un utilisateur connecté de supprimer des fichiers arbitraires sur le serveur en envoyant des requêtes spécialement conçues vers une page AJAX d'administra…
8.1 ÉLEVÉE
CVE-2022-25411Le CMS Maxsite v180 est affecté par une faille dans sa page d'options d'administration qui permet à un attaquant de télécharger et d'exécuter un fichier PHP malveillant. Comme cett…
9.8 CRITIQUE
CVE-2022-25410Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.
5.4 MOYENNE
CVE-2022-25409Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the demail parameter at /admin-panel1.php.
5.4 MOYENNE
CVE-2022-25408Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the dpassword parameter at /admin-panel1.php.
5.4 MOYENNE
CVE-2022-25407Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Doctor parameter at /admin-panel1.php.
5.4 MOYENNE
CVE-2022-25029Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-25096. Reason: This candidate is a duplicate of CVE-2022-25096. Notes: All CVE users should reference CVE-20…
CVE-2022-25028Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections modu…
6.1 MOYENNE
CVE-2022-23907CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
6.1 MOYENNE
CVE-2022-23906CMS Made Simple (v2.2.15) est affecté par une faille dans la fonctionnalité de téléchargement d'avatars qui permet à un attaquant d'exécuter des commandes arbitraires sur votre ser…
7.2 ÉLEVÉE
CVE-2022-0743Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
4.6 MOYENNE
CVE-2021-36820Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36819Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36818Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36817Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36816Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36815Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36814Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36813Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36812Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36811Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-36810Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27000Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27016Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27015Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27014Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27013Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27012Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27011Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27010Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27009Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-27008Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE-2021-45414Les installations de DataRobot sont affectées par une faille qui permet à des attaquants de téléverser des environnements Docker ou des pilotes Java malveillants. Un attaquant peut…
9.8 CRITIQUE
CVE-2021-41112Les serveurs Rundeck utilisant des versions antérieures à la 3.4.5 sont susceptibles de présenter une faille de contournement d'autorisation. Tout utilisateur disposant d'un compte…
8.1 ÉLEVÉE
CVE-2021-41111Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user with authorization to re…
6.4 MOYENNE
CVE-2022-26315qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader.
5.3 MOYENNE
CVE-2022-26181Dropbox Lepton, une bibliothèque utilisée pour le traitement d'images, est affectée par une faille de corruption de mémoire. Un attaquant peut compromettre totalement le système en…
7.8 ÉLEVÉE
CVE-2022-25023Les logiciels utilisant la bibliothèque AudioFile pour traiter des fichiers audio sont affectés par une faille de corruption de mémoire. Un attaquant peut exécuter du code arbitrai…
8.8 ÉLEVÉE
CVE-2022-25015A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field.
5.4 MOYENNE
CVE-2022-25014Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of the current user. This vulnerability allo…
6.1 MOYENNE
CVE-2022-25013Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters in the component login.php.
6.1 MOYENNE
CVE-2020-22845La version 6.47 de Mikrotik RouterOS est affectée par une erreur de mémoire lors du traitement des requêtes FTP. Un attaquant non authentifié disposant d'un accès réseau à l'appare…
7.5 ÉLEVÉE
CVE-2020-22844MikroTik RouterOS (version 6.47) est affecté par une erreur de mémoire dans son service SMB. Un attaquant non authentifié disposant d'un accès réseau peut envoyer une requête spéci…
7.5 ÉLEVÉE
CVE-2021-44342La bibliothèque `ok-file-formats`, utilisée pour le traitement des fichiers image, contient une faille de dépassement de tampon dans sa logique de gestion des fichiers PNG. Un atta…
7.8 ÉLEVÉE
CVE-2021-44331La bibliothèque de compression de textures astcenc d'ARM (version 3.2.0) est affectée par un dépassement de tampon lors du processus d'encodage. Un attaquant peut compromettre tota…
7.8 ÉLEVÉE
CVE-2022-26158An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. …
6.1 MOYENNE
CVE-2022-26157An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to…
5.3 MOYENNE
CVE-2022-26156An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request bo…
6.1 MOYENNE
CVE-2022-26155An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body.
6.1 MOYENNE