Cross site scripting

XSS exists in InfoVista VistaPortal SE Version 5.1 build 51029. VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19769

CVE-2018-19769 affects InfoVista VistaPortal SE v5.1 (build 51029). The vulnerability is a reflected Cross-Site Scripting in the UserProperties.jsp page, exploitable via the ConnPoolName parameter. This can allow an attacker to inject arbitrary web script/HTML that may run in a victim’s browser, ...

CVE-2018-19822

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

CVE-2018-19773

The CVE-2018-19773 entry concerns a reflected Cross Site Scripting vulnerability in Infovista VistaPortal SE 5.1 (build 51029), specifically on the EditCurrentUser.jsp page where GroupId and ConnPoolName can reflect attacker-controlled input. Multiple connected sources verify the issue and descri...

CVE-2018-19815

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19820

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19814

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

CVE-2018-19812

The CVE-2018-19812 issue affects InfoVista VistaPortal SE 5.1 (build 51029). The page /VPortal/mgtconsole/SubFolderPackages.jsp is vulnerable to reflected XSS via the GroupId parameter. CVSS metrics indicate MEDIUM severity (CVSS v2: 4.3; CVSS v3: 6.1) with network attack vector, no privileges re...

CVE-2018-19118

Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service stack-based buffer overflow via the 'Domain Name' field when adding a new domain...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07232)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

VistaPortal SE 5.1 Cross Site Scripting

Complete list: CVE-2018-19649, CVE-2018-19765, CVE-2018-19766, CVE-2018-19767, CVE-2018-19768, CVE-2018-19769, CVE-2018-19770, CVE-2018-19771, CVE-2018-19772, CVE-2018-19773, CVE-2018-19774, CVE-2018-19775, CVE-2018-19809, CVE-2018-19810, CVE-2018-19811, CVE-2018-19812, CVE-2018-19813,...

Typesetter 5.1 Cross Site Scripting

Reflected Cross-site Scripting Vulnerability in Typesetter 5.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in Typesetter Affected Software: Typesetter Affected Versions: 5.1 Homepage: https://www.typesettercms.com Vulnerability:...

CVE-2018-4386

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

About the security content of watchOS 5.1

About the security content of watchOS 5.1 This document describes the security content of watchOS 5.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2018-17044

In YzmCMS 5.1, stored XSS exists via the admin/systemmanage/userconfigadd.html title parameter...

CVE-2018-17044

The CVE-2018-17044 entry affects YzmCMS 5.1 and is a stored cross-site scripting (XSS) vulnerability exposed through the admin/system_manage/user_config_add.html title parameter . The vulnerability allows injection of script into the title field, which can be stored and subsequently rendered to u...

Cross site scripting

An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...

CVE-2018-15847

CVE-2018-15847 affects puppyCMS 5.1: an XSS vulnerability exists in menu.php via the "Add Page/URL" field. The issue allows injection of JavaScript through that link field, as described by multiple sources (NVD/CNVD). CVSS metrics indicate a MEDIUM severity risk (base score 6.1/3.0; network attac...