CVE-2018-25054

creationtimestamp| type| source ---|---|--- 2022-12-28 14:12:18+00:00| seen| https://t.me/cibsecurity/55470...

CVE-2018-25051

creationtimestamp| type| source ---|---|--- 2022-12-28 14:12:17+00:00| seen| https://t.me/cibsecurity/55469...

CVE-2018-25055

A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of the argument suggestion leads to cross...

CVE-2018-25054

A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details leads to cross site scripting. It is...

CVE-2018-25050

creationtimestamp| type| source ---|---|--- 2022-12-28 12:12:11+00:00| seen| https://t.me/cibsecurity/55463 2025-04-10 20:49:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11339...

CVE-2018-25056

CVE-2018-25056 affects the Yolapi project. The vulnerability lies in the function render_description of the file yolapi/pypi/metadata.py, where manipulation of the argument text leads to cross-site scripting. It can be triggered remotely. The patch named a0fe129055a99f429133a5c40cb13b44611ff796 i...

CVE-2018-25055

CVE-2018-25055 concerns FarCry Solr Pro Plugin (up to 1.5.x). The vulnerability lies in the Search Handler’s packages/forms/solrProSearch.cfc and the manipulation of the suggest ion argument, which enables cross-site scripting. It can be exploited remotely. Upgrading to version 1.6.0 addresses th...

CVE-2018-25055 FarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting

A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of the argument suggestion leads to cross...

CVE-2018-25054

CVE-2018-25054 affects shred cilla. The vulnerability lies in the Search Handler’s search.jsp (cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp), where manipulating the details argument leads to cross-site scripting. The issue is exploitable remotely, requiring no local access beyond reac...

CVE-2018-25054 shred cilla Search search.jsp cross site scripting

A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details leads to cross site scripting. It is...

CVE-2018-25053 moappi Json2html json2html.js cross site scripting

A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown processing of the file json2html.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.2.0 is able to address this...

CVE-2018-25053

CVE-2018-25053 concerns the moappi Json2html library (up to 1.1.x). The problem is a cross-site scripting flaw that arises from certain processing in the json2html.js file. The vulnerability can be triggered remotely, and the known remediation is upgrading to version 1.2.0, with the patch identif...

CVE-2018-25051

The CVE-2018-25051 vulnerability affects JmPotato Pomash, specifically an issue in Pomash/theme/clean/templates/editor.html where manipulating article.title, content.title, or article.tag can trigger cross-site scripting. This could be exploited remotely. A patch named be1914ef0a6808e00f51618b2de...

CVE-2018-25051 JmPotato Pomash editor.html cross site scripting

A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site scripting. It is possible to initiate...

CVE-2018-25050

Harvest Chosen up to 1.8.6 contains a cross-site scripting (XSS) flaw in the AbstractChosen function (coffee/lib/abstract-chosen.coffee). Manipulation of the group_label argument enables the vulnerability, which is exploitable remotely. A fix is available in version 1.8.7; upgrading addresses the...

CVE-2018-25050 Harvest Chosen abstract-chosen.coffee AbstractChosen cross site scripting

A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument grouplabel leads to cross site scripting. The attack may be...

CVE-2018-25050 Harvest Chosen abstract-chosen.coffee AbstractChosen cross site scripting

A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument grouplabel leads to cross site scripting. The attack may be...

K10015187: BIG-IP APM client for Windows vulnerability CVE-2018-5547

Security Advisory Description Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the...

CVE-2018-25046

creationtimestamp| type| source ---|---|--- 2022-12-28 00:12:04+00:00| seen| https://t.me/cibsecurity/55452...

Grafana <= 6.0.0 Multiple XSS Vulnerabilities

Grafana is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...