Lucene search
+L

7976 matches found

Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•58 views

CVE-2019-6011

Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.2AI score0.00943EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•29 views

CVE-2019-6029

Cross-site scripting vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.5AI score0.00937EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•33 views

CVE-2019-6033

Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 Ver.2.10.x, Ver.2.9.26 Ver.2.9.x, and Ver.2.8.64 Ver.2.8.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1AI score0.00781EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•8 views

PT-2019-17943

Name of the Vulnerable Software and Affected Versions NetCommons versions 3.2.2 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 3.2.2 and earlier, update to a version later th...

6.1CVSS0.00781EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•11 views

PT-2019-17955

Name of the Vulnerable Software and Affected Versions KINZA for Windows versions 5.9.2 and earlier KINZA for Mac versions 5.0.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the RSS reader. Recommendations For KINZA for...

6.1CVSS0.00781EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•6 views

PT-2019-17938

Name of the Vulnerable Software and Affected Versions wpDataTables Lite versions 2.0.11 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For wpDataTables Lite versions 2.0.11 and earlier, update to a version later...

6.1CVSS0.00943EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•7 views

PT-2019-17953

Name of the Vulnerable Software and Affected Versions Custom Body Class versions 0.6.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 0.6.0 and earlier, update to a version later than 0.6.0 to resol...

6.1CVSS0.00937EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•8 views

PT-2019-17941

Name of the Vulnerable Software and Affected Versions REMISE Payment Module versions 3.0.12 and earlier REMISE Payment Module versions 2.11 through 2.13 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site...

6.1CVSS0.00781EPSS
SaveExploits0References4
Prion
Prion
•added 2019/12/17 6:15 p.m.•32 views

Cross site scripting

Cross-site scripting XSS vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php...

4.3CVSS6AI score0.0095EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/12/11 7:15 p.m.•32 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Product name or 2 Price description fields via a request to wp-admin/admin.php. NOTE: This issue may on...

4.3CVSS5.9AI score0.04084EPSS
SaveExploits7References7Affected Software1
Cvelist
Cvelist
•added 2019/12/11 6:36 p.m.•55 views

CVE-2013-5978

Multiple cross-site scripting XSS vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 Product name or 2 Price description fields via a request to wp-admin/admin.php. NOTE: This issue may on...

6.2AI score0.04084EPSS
SaveExploits6References7
Prion
Prion
•added 2019/12/09 8:15 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in Accentis Content Resource Management System before October 2015 patch allows remote attackers to inject arbitrary web script or HTML via the ctl00$cphcontent$uigformState parameter...

4.3CVSS6.1AI score0.00949EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/12/09 12:00 a.m.•7 views

PT-2019-7179

Name of the Vulnerable Software and Affected Versions Accentis Content Resource Management System versions prior to October 2015 patch Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the ctl00$cph content$ uig formState parameter. This c...

6.1CVSS0.00949EPSS
SaveExploits2References2
NVD
NVD
•added 2019/11/26 3:15 p.m.•31 views

CVE-2015-4457

Multiple cross-site scripting XSS vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors...

5.4CVSS5.2AI score0.00622EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/11/26 2:02 p.m.•32 views

CVE-2015-4457

Multiple cross-site scripting XSS vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors...

5.2AI score0.00622EPSS
SaveExploits0References1
CVE
CVE
•added 2019/11/25 5:03 p.m.•85 views

CVE-2011-4924

CVE-2011-4924 is a Zope XSS vulnerability: multiple Zope 2.x branches (2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, as well as 3.1.1–3.4.1) allow remote attackers to inject arbitrary web script or HTML via error-message sanitizat...

6.1CVSS6AI score0.01362EPSS
SaveExploits0References7Affected Software1
Prion
Prion
•added 2019/11/22 7:15 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action...

4.3CVSS6.1AI score0.0138EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2019/11/22 6:53 p.m.•45 views

CVE-2013-0203

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 unspecified parameters to apps/calendar/ajax/event/new.php or 2 url parameter to apps/bookmarks/ajax/addBookmark.php...

5.7AI score0.00724EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/11/22 6:20 p.m.•34 views

CVE-2013-6878

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

6.1AI score0.00785EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2019/11/22 12:00 a.m.•8 views

PT-2019-6838

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.0.10 through 4.5.5 ownCloud versions prior to 4.0.10 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the unspecified parameters to...

5.4CVSS0.00724EPSS
SaveExploits0References4
Rows per page
Query Builder