Export limit exceeded: 26253 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-30878

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Rageframe
Products
Rageframe
CVE-2024-30879

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId parameter in the image cropping function.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Rageframe
Products
Rageframe
CVE-2024-30880

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Rageframe
Products
Rageframe
CVE-2024-30883

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRatio parameter in the image cropping function.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Rageframe
Products
Rageframe
CVE-2022-36530

An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the info.php page.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Rageframe
Products
Rageframe