Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-09 CVE-2024-40741 Cross-site Scripting vulnerability in Netbox 4.0.3
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/{id}/edit/.
network
low complexity
netbox CWE-79
6.1
2024-07-09 CVE-2024-40742 Cross-site Scripting vulnerability in Netbox 4.0.3
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the circuit ID parameter at /circuits/circuits/add.
network
low complexity
netbox CWE-79
6.1
2024-07-09 CVE-2024-21729 Cross-site Scripting vulnerability in Joomla Joomla!
Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field.
network
low complexity
joomla CWE-79
6.1
2024-07-09 CVE-2024-21730 Cross-site Scripting vulnerability in Joomla Joomla!
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector.
network
low complexity
joomla CWE-79
5.4
2024-07-09 CVE-2024-21731 Cross-site Scripting vulnerability in Joomla Joomla!
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method.
network
low complexity
joomla CWE-79
6.1
2024-07-09 CVE-2024-26184 Unspecified vulnerability in Microsoft products
Secure Boot Security Feature Bypass Vulnerability
high complexity
microsoft
6.8
2024-07-09 CVE-2024-26278 Cross-site Scripting vulnerability in Joomla Joomla!
The Custom Fields component not correctly filter inputs, leading to a XSS vector.
network
low complexity
joomla CWE-79
6.1
2024-07-09 CVE-2024-26279 Cross-site Scripting vulnerability in Joomla Joomla!
The wrapper extensions do not correctly validate inputs, leading to XSS vectors.
network
low complexity
joomla CWE-79
6.1
2024-07-09 CVE-2024-30071 Unspecified vulnerability in Microsoft products
Windows Remote Access Connection Manager Information Disclosure Vulnerability
local
high complexity
microsoft
4.7
2024-07-09 CVE-2024-35270 Unspecified vulnerability in Microsoft products
Windows iSCSI Service Denial of Service Vulnerability
high complexity
microsoft
5.3