Lucene search
K

6892 matches found

NVD
NVD
added 2016/08/26 7:59 p.m.17 views

CVE-2016-5663

Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...

6.1CVSS6.1AI score0.00896EPSS
Exploits0References2
Cvelist
Cvelist
added 2016/08/26 7:0 p.m.30 views

CVE-2016-5663

Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...

6.2AI score0.00896EPSS
Exploits0References2
Prion
Prion
added 2016/08/22 10:59 a.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024...

3.5CVSS5.8AI score0.00802EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2016/08/19 9:59 p.m.18 views

CVE-2016-3195

Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6AI score0.01009EPSS
Exploits2References3
NVD
NVD
added 2016/08/19 9:59 p.m.17 views

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

6.1CVSS6AI score0.04858EPSS
Exploits1References5
Prion
Prion
added 2016/08/19 9:59 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01009EPSS
Exploits2References3Affected Software2
NVD
NVD
added 2016/08/09 8:59 p.m.17 views

CVE-2016-4170

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6AI score0.01734EPSS
Exploits0References3
Prion
Prion
added 2016/08/09 8:59 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01734EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2016/08/09 8:59 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01734EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2016/08/09 8:59 p.m.16 views

CVE-2016-4168

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6AI score0.01734EPSS
Exploits0References3
Cvelist
Cvelist
added 2016/08/09 8:0 p.m.18 views

CVE-2016-4170

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6AI score0.01734EPSS
Exploits0References3
NVD
NVD
added 2016/08/05 2:59 p.m.29 views

CVE-2016-3097

Cross-site scripting XSS vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data...

6.1CVSS6AI score0.01075EPSS
Exploits0References2
NVD
NVD
added 2016/08/05 2:59 p.m.27 views

CVE-2016-3080

Cross-site scripting XSS vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via the 1 RHNMD User or 2 Filesystem parameters, related to display of monitoring probes...

6.1CVSS6.1AI score0.01075EPSS
Exploits0References2
Prion
Prion
added 2016/08/05 2:59 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section...

3.5CVSS5.7AI score0.00992EPSS
Exploits0References7Affected Software2
Cvelist
Cvelist
added 2016/08/05 2:0 p.m.32 views

CVE-2016-3097

Cross-site scripting XSS vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote attackers to inject arbitrary web script or HTML via a group name, related to viewing snapshot data...

6AI score0.01075EPSS
Exploits0References2
Patchstack
Patchstack
added 2016/08/04 12:0 a.m.4 views

WordPress Form Builder Plugin <= 1.05 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...

2.1AI score
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2016/08/03 1:0 a.m.19 views

CVE-2016-4833

Cross-site scripting XSS vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1AI score0.01805EPSS
Exploits0References5
Patchstack
Patchstack
added 2016/08/01 12:0 a.m.6 views

WordPress Live Chat Support Plugin <= 6.2.03 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

1.8AI score
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2016/08/01 12:0 a.m.26 views

Liferay Stored XSS Vulnerability

Liferay is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS5.9AI score0.02291EPSS
Exploits5References2
NVD
NVD
added 2016/07/15 4:59 p.m.19 views

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

6.1CVSS6.1AI score0.00773EPSS
Exploits0References1
Rows per page
Query Builder