Lucene search
K

6892 matches found

NVD
NVD
added 2012/11/17 9:55 p.m.16 views

CVE-2012-5889

Cross-site scripting XSS vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.00931EPSS
Exploits0References2
Prion
Prion
added 2012/11/17 9:55 p.m.16 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in an about: page or 2 the last visited URL in the LastVisitWriteEn function in function.js...

4.3CVSS6.1AI score0.01335EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2012/11/17 9:55 p.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php...

4.3CVSS6.2AI score0.08732EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2012/11/17 9:55 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in admin/action/objects.php in SAMEDIA LandShop 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the OTRHEADS parameter in an edit action. NOTE: some of these details are obtained from third party information...

4.3CVSS6.2AI score0.01633EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2012/11/17 9:0 p.m.18 views

CVE-2012-5902

Cross-site scripting XSS vulnerability in ptk/lib/modalbookmark.php in DFLabs PTK 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the arg4 parameter...

5.7AI score0.01161EPSS
Exploits0References4
Prion
Prion
added 2012/11/16 12:24 p.m.21 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

4.3CVSS5.9AI score0.04427EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2012/11/16 12:24 p.m.29 views

CVE-2012-5882

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

4.3CVSS7.2AI score0.02404EPSS
Exploits0References4
Cvelist
Cvelist
added 2012/11/15 11:0 a.m.23 views

CVE-2012-4955

Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.02469EPSS
Exploits0References8
OwnCloud
OwnCloud
added 2012/11/14 10:42 a.m.45 views

Server: XSS vulnerability in user_webdavauth

A cross-site scripting XSS vulnerability in ownCloud 4.5.x before 4.5.2 allow remote attackers to inject arbitrary web script or HTML via the POST data to settings.php in apps/userwebdavauth/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

4.3CVSS5.3AI score0.01832EPSS
Exploits0Affected Software1
NVD
NVD
added 2012/11/02 3:55 p.m.15 views

CVE-2012-4497

Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...

2.1CVSS5.3AI score0.01064EPSS
Exploits0References7
Prion
Prion
added 2012/11/02 3:55 p.m.7 views

Cross site scripting

Cross-site scripting XSS vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL...

2.1CVSS5.7AI score0.01064EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2012/10/31 7:55 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field...

4.3CVSS6.2AI score0.07171EPSS
Exploits2References1Affected Software2
NVD
NVD
added 2012/10/31 4:55 p.m.11 views

CVE-2012-4492

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

2.1CVSS5.5AI score0.01041EPSS
Exploits0References6
NVD
NVD
added 2012/10/31 4:55 p.m.15 views

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

4.3CVSS5.5AI score0.01325EPSS
Exploits1References6
Prion
Prion
added 2012/10/31 4:55 p.m.8 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Excluded Users module 6.x-1.x before 6.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via a 1 user name or 2 email address...

4.3CVSS6AI score0.01161EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2012/10/31 4:55 p.m.11 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

4.3CVSS5.7AI score0.01325EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2012/10/31 4:55 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01951EPSS
Exploits0References6Affected Software1
Prion
Prion
added 2012/10/31 4:55 p.m.13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

2.1CVSS5.7AI score0.01041EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2012/10/31 4:0 p.m.19 views

CVE-2012-4490

Multiple cross-site scripting XSS vulnerabilities in the Excluded Users module 6.x-1.x before 6.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via a 1 user name or 2 email address...

5.8AI score0.01161EPSS
Exploits0References5
Cvelist
Cvelist
added 2012/10/31 4:0 p.m.19 views

CVE-2012-4492

Multiple cross-site scripting XSS vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the 1 report or 2 Custom Services...

5.5AI score0.01041EPSS
Exploits0References6
Rows per page
Query Builder