Pulse Secure Pulse Connect Secure and Pulse Policy Secure Cross-Site Scripting Vulnerabilities

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse and Pulse Policy Secure are both products of Pulse Secure, Inc.Pulse Connect Secure is an SSL VPN solution. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a network access control solution...

Jalios JCMS Cross-Site Scripting Vulnerability

Jalios JCMS is a suite of integrated enterprise information management solutions from Jalios, a French company. The product includes enterprise social networking, social learning, document management and content management systems. A cross-site scripting vulnerability exists in the...

IBM Intelligent Operations Center Cross-Site Scripting Vulnerability (CNVD-2020-44876)

IBM Intelligent Operations Center IOC is a suite of city operations solutions from IBM in the United States. The product features data visualization and real-time collaboration. A cross-site scripting vulnerability exists in IBM Intelligent Operations Center IOC, which stems from the lack of prop...

Mida Solutions eFramework Cross-Site Scripting Vulnerability (CNVD-2020-42663)

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. A cross-site scripting vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data by...

Torchbox Wagtail Cross-Site Scripting Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A cross-site scripting vulnerability exists in Torchbox Wagtail versions prior to 2.7.4 and prior to 2.9.3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

We-COM Municipality portal CMS cross-site scripting vulnerability

We-COM Municipality portal CMS is a Content Management System CMS from the Italian company We-COM. A cross-site scripting vulnerability exists in We-COM Municipality portal CMS version 2.1.x. The vulnerability stems from a lack of proper validation of client-side data in the web application and c...

Cross-site scripting vulnerability in Xunrui CMS version 4.3.8 (2020-06-01)

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China XunRuiCloud Software Development Company. A cross-site scripting vulnerability exists in XunRui CMS version 4.3.8 2020-06-01. The vulnerability stems from the lack of proper validation ...

CloudBees Jenkins VncRecorder Plugin Cross-Site Scripting Vulnerability (CNVD-2020-50510)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncRecorder Plugin is used in one of the scre...

CloudBees Jenkins VncRecorder Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncRecorder Plugin is used in one of the scre...

OpenClinic GA Cross-Site Scripting Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A cross-site scripting vulnerability exists in OpenClinic GA version 5.09.02 and 5.89.05b, which stems from the lack...

Boole Server BooleBox Secure File Sharing Utility Cross-Site Scripting Vulnerability

Boole Server BooleBox Secure File Sharing Utility is a file sharing system from Boole Server Italy. The system is mainly used for encrypted file storage and sharing. A cross-site scripting vulnerability exists in Boole Server BooleBox Secure File Sharing Utility. The vulnerability stems from a la...

Bitrix24 Web Application Firewall Cross-Site Scripting Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix, USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management.Web Application Firewall is one of the Web Application Firewalls. A cross-site scripting vulnerability...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-52837)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35338)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 4.0.0, prior to 3.10.2, and prior to 3.9.2. The vulnerability stems from a lack of proper validation of client data...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35463)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 3.0.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35460)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 3.1.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

MONITORAPP AIWAF-VE and AIWAF-4000 Cross-Site Scripting Vulnerabilities

Monitorapp AIWAF-4000 is an application firewall from MONITORAPP Monitorapp, USA. A cross-site scripting vulnerability exists in MONITORAPP AIWAF-VE and AIWAF-4000 2020-06-16 and earlier versions. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2020-53118)

Open-Xchange OX Guard is an encryption software from Open-Xchange USA. The software is mainly used for encryption/decryption of emails and documents. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.10.3 and earlier versions. The vulnerability stems from a lack of proper...

Bolt CMS Cross-Site Scripting Vulnerability (CNVD-2020-35955)

Bolt CMS is a PHP-based open source content management system for the Bolt community. A cross-site scripting vulnerability exists in Bolt CMS versions prior to 3.7.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

Cybele Software Thinfinity VirtualUI Cross-Site Scripting Vulnerability

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A cross-site scripting vulnerability exists in Cybele Software Thinfinity VirtualUI...