Lucene search
K

874 matches found

CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

cPanel cross-site scripting vulnerability (CNVD-2019-26353)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

6.1CVSS6.3AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

cPanel cross-site scripting vulnerability (CNVD-2019-26191)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

5.4CVSS6.3AI score0.00531EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

cPanel cross-site scripting vulnerability (CNVD-2019-26204)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

6.1CVSS6.3AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

cPanel cross-site scripting vulnerability (CNVD-2019-26189)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

6.1CVSS6.3AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/01 12:0 a.m.3 views

WallacePOS Cross-Site Scripting Vulnerability (CNVD-2019-25985)

WallacePOS is an open source, web-based POS and business management system. The system is compatible with standard POS hardware such as receipt printers, cash drawers and barcode scanners. A cross-site scripting vulnerability exists in WallacePOS version 1.4.3. The vulnerability stems from the WE...

5.4CVSS6.4AI score0.00855EPSS
Exploits1References1
CNVD
CNVD
added 2019/07/31 12:0 a.m.3 views

cPanel cross-site scripting vulnerability (CNVD-2019-33871)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS6.4AI score0.00647EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/31 12:0 a.m.1 views

http-file-server cross-site scripting vulnerability

http-file-server is an HTTP file server. A cross-site scripting vulnerability exists in http-file-server all versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS6.4AI score0.00709EPSS
Exploits1References1
CNVD
CNVD
added 2019/07/30 12:0 a.m.2 views

Ahsay Systems Cloud Backup Suite Cross-Site Scripting Vulnerability

Ahsay Systems Cloud Backup Suite is a cloud-based backup software suite from Ahsay Systems. A cross-site scripting vulnerability exists in the Alias field in Ahsay Systems Cloud Backup Suite versions prior to 8.1.1.50. The vulnerability stems from a lack of proper validation of client data by the...

6.1CVSS6.3AI score0.00826EPSS
Exploits5References1
CNVD
CNVD
added 2019/07/30 12:0 a.m.2 views

CentOS Web Panel Cross-Site Scripting Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in the filemanager2.php file the 'fmcurrentdir' parameter in CWP version 0.9.8.846. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker can...

6.1CVSS6.4AI score0.02176EPSS
Exploits3References1
CNVD
CNVD
added 2019/07/29 12:0 a.m.2 views

MISP Cross-Site Scripting Vulnerability (CNVD-2020-22366)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from a cross-site scripting vulnerability. The vulnerability stems from a lac...

6.1CVSS6.5AI score0.00809EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/29 12:0 a.m.2 views

WordPress Email Subscribers&Newsletters Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Email Subscribers&Newsletters is one of the plug-ins used to push news and information. A cross-site scripting vulnerability exists in...

6.1CVSS6.2AI score0.0133EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/25 12:0 a.m.2 views

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24242)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

6.1CVSS6.5AI score0.01521EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/25 12:0 a.m.2 views

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24256)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

6.1CVSS6.5AI score0.01553EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/25 12:0 a.m.4 views

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24213)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

6.1CVSS6.5AI score0.01518EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/24 12:0 a.m.4 views

McAfee Data Loss Prevention Endpoint Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

6.1CVSS6.2AI score0.00825EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/23 12:0 a.m.2 views

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2019-23999)

Frog CMS is a Content Management System CMS developed by Philippe Archambault Software Developers. The system provides tools for page templates, user rights management and document management. A cross-site scripting vulnerability exists in Snippets in Frog CMS version 1.1. The vulnerability stems...

5.4CVSS6.4AI score0.00649EPSS
Exploits1References1
CNVD
CNVD
added 2019/07/22 12:0 a.m.3 views

EspoCRM Cross-Site Scripting Vulnerability (CNVD-2019-30787)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.4, which can be exploited by remote attackers to...

6.1CVSS6.5AI score0.0114EPSS
Exploits1References1
CNVD
CNVD
added 2019/07/22 12:0 a.m.2 views

WordPress CampTix Event Ticketing Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.CampTix Event Ticketing is a ticketing system plugin used in it. WordPress CampTix Event Ticketing has a cross-site scripting...

4.8CVSS6.3AI score0.00913EPSS
Exploits1References1
CNVD
CNVD
added 2019/07/22 12:0 a.m.2 views

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2019-29581)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox versions prior to 68. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can...

6.1CVSS8.2AI score0.01085EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/22 12:0 a.m.2 views

Firefly III Cross-Site Scripting Vulnerability (CNVD-2019-30775)

Firefly III is an open source personal financial management system. A cross-site scripting vulnerability exists in Firefly III versions prior to 4.7.17.3, which can be exploited by an attacker to execute client-side code...

5.4CVSS6.4AI score0.00762EPSS
Exploits1References1
Rows per page
Query Builder