2014-09-10

2014-09-11

2014-09-12

All (2) Critical (1) High (8) Medium (33) Low (2)

CVE-2014-3740 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbitrary web script or HTML via the Summary field in a ticket request to the. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Spiceworks

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

2.3%

CVE-2014-6237 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

XSS News Pack

NVD

CVSS 2.0

3.5

EPSS

0.2%