Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-23 | CVE-2023-41178 | Cross-site Scripting vulnerability in Trendmicro Mobile Security 9.8 Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41176. | 6.1 |
| 2024-01-23 | CVE-2023-52326 | Cross-site Scripting vulnerability in Trendmicro Apex Central 2019 Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327. | 6.1 |
| 2024-01-23 | CVE-2023-52327 | Cross-site Scripting vulnerability in Trendmicro Apex Central 2019 Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328. | 6.1 |
| 2024-01-23 | CVE-2023-52328 | Cross-site Scripting vulnerability in Trendmicro Apex Central 2019 Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329. | 6.1 |
| 2024-01-23 | CVE-2023-52329 | Cross-site Scripting vulnerability in Trendmicro Apex Central 2019 Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326. | 6.1 |
| 2024-01-23 | CVE-2023-52330 | Cross-site Scripting vulnerability in Trendmicro Apex ONE A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. | 6.1 |
| 2024-01-23 | CVE-2023-7238 | Cross-site Scripting vulnerability in Orthanc-Server Osimis web Viewer 1.4.2.09D9Eff4 A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. | 6.1 |
| 2024-01-23 | CVE-2024-22497 | Cross-site Scripting vulnerability in Jfinalcms Project Jfinalcms 5.0.0 Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. | 6.1 |
| 2024-01-23 | CVE-2023-45889 | Cross-site Scripting vulnerability in Classlink Oneclick 10.7/10.8 A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. | 6.1 |
| 2024-01-23 | CVE-2024-22490 | Cross-site Scripting vulnerability in Beetl-Bbs Project Beetl-Bbs 2.0 Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter. | 6.1 |