4587 matches found
Cross site scripting
Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...
CVE-2020-13278
Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...
CVE-2020-13278
Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...
CVE-2020-13278: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...
Cross site request forgery (csrf)
Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-13819: Improper Neutralization of Input During Web Page Generation
Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
PT-2020-13702
Name of the Vulnerable Software and Affected Versions Extreme EAC Appliance version 8.4.1.24 Description The issue allows unauthenticated reflected XSS via a parameter in a GET request. Recommendations For Extreme EAC Appliance version 8.4.1.24, consider restricting access to the vulnerable...
CVE-2020-16847
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
Design/Logic Flaw
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539...
CVE-2020-4410
CVE-2020-4410 affects IBM Jazz Foundation and IBM Engineering products, enabling an authenticated user to read attachments they should not access via a specially crafted HTTP GET request. Public details from IBM bulletin and CNVD corroborate an information-disclosure flaw in IBM Engineering Test ...
CVE-2020-4410: Undefined Security Weakness
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539...
PT-2020-14891
Name of the Vulnerable Software and Affected Versions Extreme Management Center versions prior to 8.5.0.169 Description The issue allows unauthenticated reflected XSS via a parameter in a GET request. Recommendations For versions prior to 8.5.0.169, update to version 8.5.0.169 or later to resolve...
CVE-2020-16847: Improper Neutralization of Input During Web Page Generation
Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887...
Cross site request forgery (csrf)
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-13820
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
CVE-2020-13820
CVE-2020-13820 affects Extreme Management Center 8.4.1.24 and is described in multiple sources as an unauthenticated reflected XSS vulnerability caused by a GET parameter. The nuclei template specifies that an attacker can inject arbitrary script in the victim’s browser, potentially stealing cook...
CVE-2020-13820: Improper Neutralization of Input During Web Page Generation
Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request...
PT-2020-6390
Name of the Vulnerable Software and Affected Versions Event Espresso Core plugin versions prior to 4.10.7.p Description A cross-site scripting XSS issue exists due to insufficient protection of the web page structure. This allows remote attackers to inject arbitrary web script or HTML via the pag...
PT-2020-13703
Name of the Vulnerable Software and Affected Versions Extreme Management Center version 8.4.1.24 Description The issue allows unauthenticated reflected XSS via a parameter in a GET request. Recommendations For Extreme Management Center version 8.4.1.24, update to a version that fixes this issue. ...
D-Link DAP-1522 Authentication Bypass Vulnerability (CVE-2020-15896)
The D-Link DAP-1522 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...