Lucene search
+L

7709 matches found

CVE
CVE
added 2021/10/21 2:50 a.m.78 views

CVE-2021-34789

Cisco Tetration’s web-based management interface contains a stored XSS flaw caused by insufficient input validation. An authenticated attacker with valid administrative credentials could inject malicious scripts into specific interface pages, allowing execution of arbitrary script in the affected...

4.8CVSS4.8AI score0.00594EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/21 2:50 a.m.33 views

CVE-2021-34760 Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the...

4.8CVSS5.2AI score0.00592EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/13 9:15 a.m.24 views

CVE-2021-20805

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00605EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.21 views

CVE-2021-20807

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS0.00754EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.28 views

CVE-2021-20799

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00608EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.23 views

CVE-2021-20798

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00608EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/13 9:15 a.m.22 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00608EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.22 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00605EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.25 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00608EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.25 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00605EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.20 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

4.3CVSS6.6AI score0.00754EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 9:15 a.m.6 views

CVE-2021-20807

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS6.2AI score0.00754EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/10/13 8:31 a.m.31 views

CVE-2021-20807

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.8AI score0.00754EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/13 8:30 a.m.35 views

CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

6.1AI score0.00605EPSS
SaveExploits0References2
Veracode
Veracode
added 2021/10/08 7:58 a.m.20 views

Cross-Site Scripting (XSS)

teddy is vulnerable to cross-site scripting XSS attacks. The vulnerability exists because it does not properly escape the user-supplied input in 'utils.js' allowing the attacker to inject arbitrary script...

6.1CVSS3.2AI score0.01128EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2021/10/06 8:15 p.m.42 views

CVE-2021-34742

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS0.00774EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/06 8:15 p.m.26 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

4.3CVSS5.9AI score0.00774EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/06 7:46 p.m.12 views

CVE-2021-34742 Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6.1AI score0.00774EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/06 7:46 p.m.44 views

CVE-2021-34742 Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6.1AI score0.00774EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/01 4:15 p.m.18 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6.1AI score
SaveExploits0References2
Rows per page
Query Builder