CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2014-125070 – yanheven console tables.py AvailabilityZonesTable cross site scripting
https://notcve.org/view.php?id=CVE-2014-125070
08 Jan 2023 — A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function get_zone_hosts/AvailabilityZonesTable of the file openstack_dashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can be launched remotely. The patch is named ba908ae88d5925f4f6783eb234cc4ea95017472b. • https://github.com/yanheven/console/commit/ba908ae88d5925f4f6783eb234cc4ea95017472b • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0539 – Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console
https://notcve.org/view.php?id=CVE-2022-0539
09 Feb 2022 — Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en Packagist ptrofimov/beanstalk_console versiones anteriores a 1.7.14 • https://github.com/ptrofimov/beanstalk_console/commit/5aea5f912f6e6d19dedb1fdfc25a29a2e1fc1694 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0501 – Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
https://notcve.org/view.php?id=CVE-2022-0501
05 Feb 2022 — Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Reflejado en Packagist ptrofimov/beanstalk_console versiones anteriores a 1.7.12 • https://github.com/ptrofimov/beanstalk_console/commit/e351c8260ec1d3718d9e475ee57c7e12c47f19da • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10532
https://notcve.org/view.php?id=CVE-2016-10532
31 May 2018 — console-io is a module that allows users to implement a web console in their application. A malicious user could bypass the authentication and execute any command that the user who is running the console-io application 2.2.13 and earlier is able to run. This means that if console-io was running from root, the attacker would have full access to the system. This vulnerability exists because the console-io application does not configure socket.io to require authentication, which allows a malicious user to conn... • https://nodesecurity.io/advisories/90 • CWE-287: Improper Authentication •