8735 matches found
PT-2017-8562
Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.0.0 through 10.4.0 Description A cross-site scripting issue allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. Recommendations For Cybozu Office versions 9.0.0...
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies...
CVE-2016-1155: Improper Neutralization of Special Elements in Output Used by a Downstream Component
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies...
CVE-2016-2803
Cross-site scripting XSS vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML...
CVE-2017-3125
CVE-2017-3125 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail. Affected versions: FortiMail 5.0.0–5.2.9 and 5.3.0–5.3.8. An attacker can trick a logged-in user into clicking a crafted URL, enabling execution of arbitrary scripts in the user’s browser in...
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...
Pixie cross-site scripting vulnerability (CNVD-2017-04816)
Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...
PT-2017-17700
Name of the Vulnerable Software and Affected Versions SocialNetwork version 1.2.1 Description A Cross-Site Scripting XSS issue was discovered due to insufficient filtration of user-supplied data, specifically the mail variable, passed to the "SocialNetwork-andrea/app/template/pw forgot.php" URL...
Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04904)
Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in Revive Adserver. A remote attacker can exploit this vulnerabili...
Unspecified Cross-Site Scripting Vulnerability in Trend Micro ServerProtect for Linux
Trend Micro ServerProtect for Linux is an enterprise-grade anti-virus program that runs on Linux. An unspecified cross-site scripting vulnerability exists in Trend Micro ServerProtect for Linux, which is caused by a failure to validate user-submitted data. The vulnerability can be exploited to...
CVE-2017-7248
A Cross-Site Scripting XSS was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data type passed to the 'Gazelle-master/sections/better/transcode.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...
Cross-site Scripting (XSS)
Glassfish is vulnerable to cross-site scripting XSS attacks. A malicious user can execute arbitrary script via the REST interface...
Kunena Forum Extension 'message subject' Cross Site Scripting Vulnerability
the Kunena Forum Extension for Joomla is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MantisBT < 2.1.1 'view_type' XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
PT-2017-17612
Name of the Vulnerable Software and Affected Versions pi-engine/pi version 2.5.0 Description A Cross-Site Scripting XSS issue was discovered due to insufficient filtration of user-supplied data, specifically the preview variable, passed to the...
Ganglia Web < 3.5.8 XSS Vulnerability
Ganglia Web is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ganglia Web < 3.5.6 Multiple XSS Vulnerabilities
Ganglia Web is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2017-17574
Name of the Vulnerable Software and Affected Versions GamePanelX-V3 version 3.0.12 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "GamePanelX-V3-master/ajax/ajax.php" API endpoint. This allows an attacker to execute...
Cisco Unified Computing System Director Cross-Site Scripting Vulnerability
Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...
