10 matches found
CVE-2020-15885
A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...
CVE-2020-15885
A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...
CVE-2020-15885
A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...
CVE-2020-15885
This CVE concerns MunkiReport’s comment module prior to version 4.0, where a Cross-Site Scripting (XSS) vulnerability exists. The issue allows remote attackers to inject arbitrary web script or HTML by posting a new comment, with the potential to affect users who view comments. The available conn...
CVE-2019-15885
...
CVE-2019-15885
CVE-2019-15885 is rejected/not used and does not represent an active vulnerability.
CVE-2018-15885
Ovation FindMe 1.4-1083-1 is reported vulnerable due to obfuscation/packing that hinders binary analysis of its capabilities. The description states the product uses a compression technique to obscure certain libraries, relies on a TLS callback and an extra executable to enable these libraries an...
CVE-2017-15885
Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...
CVE-2017-15885
Axis 2100 Network Camera 2.03 is associated with CVE-2017-15885: a reflected XSS in the web administration portal that allows arbitrary JavaScript execution via the conf_Layout_OwnTitle parameter to view/view.shtml. This entry may overlap with CVE-2007-5214. The connected documents confirm the vu...
CVE-2017-15885
Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...