Live-Hack-CVE/CVE-2022-40711 PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users. CVE project by @Sn0wAlice Create: 2023-01-01 20:12:56 +0000 UTC Push: 2023-01-01 20:12:59 +0000 UTC |

Live-Hack-CVE/CVE-2022-37787 An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database execution page. CVE project by @Sn0wAlice Create: 2023-01-01 20:12:52 +0000 UTC Push: 2023-01-01 20:12:55 +0000 UTC |

Live-Hack-CVE/CVE-2022-37786 An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page. CVE project by @Sn0wAlice Create: 2023-01-01 20:12:48 +0000 UTC Push: 2023-01-01 20:12:50 +0000 UTC |

Live-Hack-CVE/CVE-2022-37785 An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins. CVE project by @Sn0wAlice Create: 2023-01-01 20:12:44 +0000 UTC Push: 2023-01-01 20:12:47 +0000 UTC |

Live-Hack-CVE/CVE-2022-34324 Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History. CVE project by @Sn0wAlice Create: 2023-01-01 20:12:40 +0000 UTC Push: 2023-01-01 20:12:43 +0000 UTC |

Live-Hack-CVE/CVE-2022-34323 Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model features (OnlineBanking > We CVE project by @Sn0wAlice Create: 2023-01-01 20:12:36 +0000 UTC Push: 2023-01-01 20:12:38 +0000 UTC |

Live-Hack-CVE/CVE-2022-34322 Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the context of users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Notify Users About Modification menu and the Notification CVE project by @Sn0wAlice Create: 2023-01-01 20:12:32 +0000 UTC Push: 2023-01-01 20:12:34 +0000 UTC |

Live-Hack-CVE/CVE-2018-25063 A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be laun CVE project by @Sn0wAlice Create: 2023-01-01 20:12:28 +0000 UTC Push: 2023-01-01 20:12:30 +0000 UTC |

Live-Hack-CVE/CVE-2018-25062 A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this issue. The name of the patch is 1 CVE project by @Sn0wAlice Create: 2023-01-01 20:12:24 +0000 UTC Push: 2023-01-01 20:12:27 +0000 UTC |

Live-Hack-CVE/CVE-2014-125030 A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The name of the patch is 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a patch to fix this issue. VDB CVE project by @Sn0wAlice Create: 2023-01-01 20:12:21 +0000 UTC Push: 2023-01-01 20:12:23 +0000 UTC |

Live-Hack-CVE/CVE-2022-43805 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:44:12 +0000 UTC Push: 2023-01-01 14:44:15 +0000 UTC |

Live-Hack-CVE/CVE-2022-43804 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:44:08 +0000 UTC Push: 2023-01-01 14:44:11 +0000 UTC |

Live-Hack-CVE/CVE-2022-43803 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:44:05 +0000 UTC Push: 2023-01-01 14:44:07 +0000 UTC |

Live-Hack-CVE/CVE-2022-43802 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:44:00 +0000 UTC Push: 2023-01-01 14:44:03 +0000 UTC |

Live-Hack-CVE/CVE-2022-43801 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:54 +0000 UTC Push: 2023-01-01 14:43:59 +0000 UTC |

Live-Hack-CVE/CVE-2022-43800 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:51 +0000 UTC Push: 2023-01-01 14:43:53 +0000 UTC |

Live-Hack-CVE/CVE-2022-43799 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:47 +0000 UTC Push: 2023-01-01 14:43:49 +0000 UTC |

Live-Hack-CVE/CVE-2022-43798 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:44 +0000 UTC Push: 2023-01-01 14:43:46 +0000 UTC |

Live-Hack-CVE/CVE-2022-43797 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:40 +0000 UTC Push: 2023-01-01 14:43:43 +0000 UTC |

Live-Hack-CVE/CVE-2022-43796 To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. CVE project by @Sn0wAlice Create: 2023-01-01 14:43:36 +0000 UTC Push: 2023-01-01 14:43:38 +0000 UTC |