Lucene search
+L

4988 matches found

CNVD
CNVD
•added 2021/03/10 12:00 a.m.•33 views

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2021-18028)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

6.1CVSS6.3AI score0.01122EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/10 12:00 a.m.•15 views

Adobe Creative Cloud Desktop Application 跨站脚本漏洞

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...

6.1CVSS5.6AI score0.01185EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/03/09 12:00 a.m.•3 views

PT-2021-2955

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description The issue is related to the lack of protection of the web page structure in Adobe Connect, allowing a remote attacker to execute arbitrary JavaScript code in the user's browser...

5.8CVSS
SaveExploits0References3
NVD
NVD
•added 2021/03/05 9:15 p.m.•34 views

CVE-2020-29029

Improper Input Validation, Cross-site Scripting XSS vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

7.3CVSS0.00777EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/03/05 7:10 p.m.•34 views

CVE-2020-29028 Reflected XSS issues

Cross-site Scripting XSS vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

6.3CVSS6AI score0.00674EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/05 12:00 a.m.•3 views

PT-2021-11636

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4 Description: The issue is related to Improper Input Validation and a Cross-site Scripting XSS vulnerability in the Web GUI of Secomea GateManager. This allows an attacker to execute arbitrary javascri...

7.3CVSS0.00777EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•6 views

CVE-2020-29029: Improper Input Validation

Improper Input Validation, Cross-site Scripting XSS vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

7.3CVSS6.3AI score0.00777EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/05 12:00 a.m.•5 views

CVE-2020-29028: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

6.3CVSS6AI score0.00674EPSS
SaveExploits0References3
Prion
Prion
•added 2021/03/04 7:15 p.m.•32 views

Cross site scripting

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

3.5CVSS5.1AI score0.00598EPSS
SaveExploits0References2Affected Software7
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•1 views

PT-2021-13904

Name of the Vulnerable Software and Affected Versions: IBM Engineering products affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

5.4CVSS0.00601EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•4 views

PT-2021-13896

Name of the Vulnerable Software and Affected Versions: IBM Engineering products affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a...

5.4CVSS0.00598EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•2 views

PT-2021-12200

Name of the Vulnerable Software and Affected Versions IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a truste...

6.4CVSS0.00733EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/03/02 12:00 a.m.•21 views

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2021-14787)

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines Corporation IBM. IBM Jazz Foundation suffers from a cross-site scripting vulnerability that can be exploited by an attacker to embed arbitrary JavaScript code in t...

5.4CVSS6.1AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/26 3:15 p.m.•34 views

CVE-2021-3010

There are multiple persistent cross-site scripting XSS vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized...

5.4CVSS0.00862EPSS
SaveExploits1References2
Prion
Prion
•added 2021/02/26 3:15 p.m.•21 views

Cross site scripting

There are multiple persistent cross-site scripting XSS vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized...

3.5CVSS5.4AI score0.00862EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•21 views

OpenText 跨站脚本漏洞

OpenText Content Server is a secure enterprise mobile content management system. A cross-site scripting vulnerability exists in OpenText Content Server 'multiple', which can be exploited by a remote attacker to introduce arbitrary JavaScript by creating malicious form values that will not be...

5.4CVSS6AI score0.00862EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•17 views

IBM Jazz Foundation 跨站脚本漏洞

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines Corporation IBM. IBM Jazz Foundation suffers from a cross-site scripting vulnerability that can be exploited by an attacker to embed arbitrary JavaScript code in t...

5.4CVSS6.4AI score0.00598EPSS
SaveExploits0References4
zdt
zdt
•added 2021/02/23 12:00 a.m.•51 views

Monica 2.19.1 - (last_name) Stored XSS Vulnerability

Exploit Title: Monica 2.19.1 - 'lastname' Stored XSS Exploit Author: BouSalman Vendor Homepage: https://www.monicahq.com/ Software Link: https://github.com/monicahq/monica/releases Version: Monica 2.19.1 Tested on: Ubuntu 18.04 CVE : CVE-2021-27370 POST /people HTTP/1.1 Host: 192.168.99.162...

5.4CVSS5.9AI score0.03271EPSS
SaveExploits4
CNVD
CNVD
•added 2021/02/19 12:00 a.m.•50 views

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2021-11047)

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A cross-site scripting vulnerability exists in IBM Jaz...

5.4CVSS5.9AI score0.00557EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/18 3:15 p.m.•29 views

Cross site scripting

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

3.5CVSS5.2AI score0.00557EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder