86 matches found
PT-2019-15384
Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.3 Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users. This type of issue can...
Cross-Site Scripting (XSS) in script src
Client-side scripts are used extensively by modern web applications. They perform from simple functions such as the formatting of text up to full manipulation of client-side data and Operating System interaction. Cross Site Scripting XSS allows clients to inject scripts into a request and have th...
PT-2019-12923
Name of the Vulnerable Software and Affected Versions Symantec My VIP portal affected versions not specified Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users, potentially bypassing...
PT-2019-19808
Name of the Vulnerable Software and Affected Versions DLP versions prior to 15.5 MP1 Description The issue is related to a cross-site scripting XSS vulnerability, which can allow attackers to inject client-side scripts into web pages viewed by other users. This type of issue can be used by...
PT-2019-12360
Name of the Vulnerable Software and Affected Versions Kalki Kalkitech SYNC3000 Substation DCU GPC versions 2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, 3.6.1 Description The issue allows an attacker to inject client-side commands or scripts to be executed on the devic...
Cross site scripting
Norton Password Manager for Android formerly Norton Identity Safe may be susceptible to a cross site scripting XSS exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by...
PT-2018-14418
Name of the Vulnerable Software and Affected Versions Norton Password Manager for Android affected versions not specified Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users. This typ...
Citrix NetScaler Gateway Cross-Site Scripting Vulnerability (CNVD-2019-01898)
Citrix NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition is a secure remote access solution from Citrix Systems. The solution provides administrators with application-level and data-level controls to enable users to remotely access applications and data from any location. A...
Cross site scripting
Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...
CVE-2018-15528
Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...
CVE-2018-15528
Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...
CVE-2018-6227
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6226
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6227
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
Cross site scripting
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6227: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into vulnerable systems...
CVE-2018-6226: Improper Neutralization of Input During Web Page Generation
Reflected cross-site scripting XSS vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems...
PT-2018-17425
Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description A stored cross-site scripting issue could allow an attacker to inject client-side scripts into vulnerable systems. Recommendations For version 5.5, update to a newer version that...