Cross site scripting

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based DOM-based cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2018-0406

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based DOM-based cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2018-0406

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based DOM-based cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2018-0406

Cisco Web Security Appliance (WSA) web-based management interface suffers a reflected/DOM-based XSS due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the interface context or leakage of ...

CVE-2018-0406

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model based DOM-based cross-site scripting XSS attack against a user of the web-based management interface of an...

stratford.govt.nz XSS vulnerability

Open Bug Bounty ID: OBB-657219 Description| Value ---|--- Affected Website:| stratford.govt.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Web Security Appliance Reflected and Document Object Model-Based Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a reflected or Document Object Model–based DOM-based cross-site scripting XSS attack against a user of the web-based management interface of an...

ca.unblock.men XSS vulnerability

Open Bug Bounty ID: OBB-656762 Description| Value ---|--- Affected Website:| ca.unblock.men Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-12944

SeedDMS (formerly LetoDMS/MyDMS) is affected by a persistent XSS in the Categories feature. The vulnerability is in the name field and affects SeedDMS versions prior to 5.1.8. Exploitation details are not provided in the available documents.

restaurantebarcelona.net XSS vulnerability

Open Bug Bounty ID: OBB-656311 Description| Value ---|--- Affected Website:| restaurantebarcelona.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lu.tezenis.com XSS vulnerability

Open Bug Bounty ID: OBB-654996 Description| Value ---|--- Affected Website:| lu.tezenis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

GHSA-488M-6GH8-9J36 bracket-template vulnerable to reflected XSS

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template...

pages.stern.nyu.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654625 Description| Value ---|--- Affected Website:| pages.stern.nyu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

dunken.org XSS vulnerability

Open Bug Bounty ID: OBB-654565 Description| Value ---|--- Affected Website:| dunken.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-12171

CVE-2017-12171 is a vulnerability reported for Red Hat Enterprise Linux 6.9 with httpd 2.2.15-60. The regression causes comments in the Allow and Deny directives to be parsed incorrectly, potentially allowing a remote attacker to bypass access controls and gain access to a restricted HTTP resourc...

ottawastreetfarmersmarket.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653632 Description| Value ---|--- Affected Website:| ottawastreetfarmersmarket.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

porterspatch.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653612 Description| Value ---|--- Affected Website:| porterspatch.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

arkansas.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653479 Description| Value ---|--- Affected Website:| arkansas.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2017-3181

CVE-2017-3181 affects multiple TIBCO Spotfire components: Spotfire Analyst 7.7.0; Connectors 7.6.0; Deployment Kit 7.7.0; Spotfire Desktop 7.6.0/7.7.0; Desktop Developer Edition 7.7.0; Desktop Language Packs 7.6.0/7.7.0; affected components include Spotfire Client and Spotfire Web Player Client. ...