CVE-2018-18084

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:16+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-11 2026-09-12 11:00:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c87a64a3-fe4b-42d0-b73f-dabdba7d4e85 2026-09-16...

CVE-2026-18084

CVE-2026-18084 is an XSS vulnerability in the BlackBerry UEM Management Console due to improper neutralization of input during web page generation. Affected: BlackBerry UEM 12.23.0 QF8 or earlier. Impact: cross-site scripting with high potential impact; no exploitation details or remediations pro...

CVE-2020-18084

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

CVE-2020-18084

CVE-2020-18084 affects yzmCMS v5.2 and enables a Cross-Site Scripting (XSS) vulnerability in the login flow. An attacker can inject commands into the referer field of a POST to the component path “/member/index/login.html” during login, potentially leading to arbitrary code execution on the victi...

CVE-2018-18084

An SQL injection vulnerability exists in DuomiCMS 3.0 within the ajax.php file. The flaw is triggered via the uid parameter, which allows for improper neutralization of special elements used in an SQL command. This vulnerability has been observed in the wild and identified in honeypot environment...

Atlassian Confluence < 6.3.4 usermacros Reflected XSS (CVE-2017-18084)

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.3.4. It is, therefore, affected by a reflected cross-site scripting vulnerability in the usermacros resource. Note that Nessus has not tested for this issue but has instead...

CVE-2017-18084

CVE-2017-18084 affects Atlassian Confluence Server

XSS in the usermacros resource through the description of a macro - CVE-2017-18084

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the description of a macro. Acknowledgements Atlassian would like to credit Veit Hailperin @fenceposterro...

XSS in the usermacros resource through the description of a macro - CVE-2017-18084

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the description of a macro. Acknowledgements Atlassian would like to credit Veit Hailperin @fenceposterro...

jQuery Suspicious URL Redirection (CVE-2018-18084)

A suspicious URL redirection to a possibly malicious jQuery domain has been encountered. By injecting JavaScript code, an attacker may redirect the user to an attacker-controlled website...