Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-4336

Múltiple vulnerabilities on Adive Framework

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of an authenticated user.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Adive
Products
Framework
CVE-2024-4337

Múltiple vulnerabilities on Adive Framework

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/nav/add, in multiple parameters. This vulnerability allows an attacker to retrieve the session details of an authenticated user.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Adive
Products
Framework
CVE-2020-7991

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
Adive
Products
Framework
CVE-2020-7989

Adive Framework 2.0.8 has admin/user/add userUsername XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Adive
Products
Framework