1148617 matches found
Cisco ASA Cross-site Scripting (CVE-2019-1701)
Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the WebVPN portal of an affected device. Th...
Cisco ASA/FTD Cross-site Scripting (CVE-2020-3582)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
PT-2026-106392
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2...
PT-2026-106795
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A collection that allows downloadable SVG uploads can store a malicious SVG file. This file can bypass sanitization, allowing the execution of...
Cisco ASA Cross-site Scripting (CVE-2019-12695)
A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web- based management interface of an...
Debian dsa-6546 : rails - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6546 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6546-1 [email protected] https://www.debian.org/securit...
PT-2026-106390
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Student Information System version 1.0 Description Cross site scripting can occur via remote execution when the searchbox argument is manipulated. This issue affects the clean function within the searchresults.php file...
Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)
A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...
Cisco ASA Cross-site Scripting (CVE-2020-3580)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
Cisco ASA Cross-site Scripting (CVE-2024-20341)
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...
SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...
Fedora 43 : chromium (2026-cd4e714c4e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cd4e714c4e advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...
RHEL 9 : grafana (RHSA-2026:76795)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76795 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/x509:...
RHCOS 4 : Red Hat build of MicroShift 4.21.36 (RHSA-2026:74796)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74796 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...
Debian dsa-6545 : roundcube - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6545 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/...
GHSA-238P-PMPM-9MQ7 KaTeX: Existing prototype pollution can bypass trust restrictions
Impact KaTeX can act as a read-side prototype pollution gadget in applications where Object.prototype has already been polluted, or where an attacker can influence the prototype of the renderer options object. KaTeX does not enable said prototype pollution. This advisory applies when combining...
CVE-2026-102295 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter
A flaw was found in Quay. A cross-site scripting XSS vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper inp...
WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by etomixer in WordPress Plugin Youzify versions = 1.3.7...