Serendipity < 2.1.1 Multiple Vulnerabilities

According to its banner, the version of Serendipity running on the remote host is prior to 2.1.1. It is, therefore, affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists in the templates/2k11/admin/category.inc.tpl script due to improper validation of the...

HTML Injection Vulnerability in Multiple EMC Products

EMC is a U.S. information storage information technology company.EMC RSA Identity Management and Governance is an enterprise-class identity management solution. An HTML injection vulnerability exists in multiple EMC products. A remote attacker with low privileges could exploit the vulnerability t...

Cross-Site Scripting Vulnerability in Multiple EMC RSA Products

EMC is a U.S. information storage information technology company.EMC RSA Identity Management and Governance is an enterprise-class identity management solution. A cross-site scripting vulnerability exists in multiple EMC products. A remote attacker could exploit the vulnerability to execute...

httpd: Padding Oracle in Apache mod_session_crypto

It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...

Cisco Unified Communications Manager XSS (cisco-sa-20170517-ucm)

According to its self-reported version, the Cisco Unified Communications Manager CUCM running on the remote device is affected by a cross-site scripting XSS vulnerability in the web-based management interface due to improper validation of user-supplied input before returning it to users. An...

iTunes < 12.6 Multiple Vulnerabilities

Binary data 700114.prm...

Dolibarr <= 4.0.4 Multiple Vulnerabilities - Active Check

Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; ifdescription...

Splunk Enterprise 6.4.x < 6.4.7 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk Enterprise running on the remote web server is 6.4.x prior to 6.4.7. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied...

MantisBT 2.2.x < 2.2.1 Multiple XSS

Binary data 700004.prm...

BINOM3 Electric Power Quality Meter Cross-Site Scripting Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A cross-site scripting vulnerability exists in BINOM3 Electric Power Quality Meter that could allow an attacker to execute arbitrary script code cross-site scripting withi...

Atlassian Confluence Server 5.10.x < 5.10.6 XSS

Binary data 9942.prm...

TrueConf Server 4.3.7 - Multiple Vulnerabilities

TrueConf Server v4.3.7 Multiple Remote Web Vulnerabilities Vendor: TrueConf LLC Product web page: https://www.trueconf.com Affected version: 4.3.7.12255 and 4.3.7.12219 Summary: TrueConf Server is a powerful, high-quality and highly secured video conferencing software server. It is specially...

Moodle 2.7.x < 2.7.18 Multiple Vulnerabilities

Binary data 9921.prm...

Mozilla Firefox < 50.1 Multiple Vulnerabilities

Binary data 9851.prm...

Adobe RoboHelp Unspecified XSS (APSB16-46)

The version of Adobe RoboHelp installed on the remote Windows host is affected by an unspecified cross-site scripting XSS vulnerability due to improper validation of input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execu...

macOS : Apple Safari < 10.0.2 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.0.2. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in WebKit due to improper validation of user-supplied input and improper handling of objec...

SPIP 3.1.3 'rac' Parameter XSS Vulnerability

SPIP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:spip:spip"; if...

HP Network Node Manager i < 10.20 Multiple Vulnerabilities

The HP Network Node Manager i NNMi server running on the remote host is a version prior to 10.20. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collectio...

BigTree-CMS 4.1.x < 4.1.9 XSS

Binary data 9553.prm...

ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting

Exploit for jsp platform in category web applications !-- ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 5.3.12252 Summary: ZKAccess Systems ar...