Lucene search
+L

18334 matches found

NVD
NVD
•added 2018/10/18 5:29 p.m.•32 views

CVE-2018-18478

Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...

6.1CVSS6AI score0.01597EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2018/10/17 5:21 p.m.•42 views

Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML

Cross-site scripting XSS vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies...

4.8CVSS3.1AI score0.02105EPSS
SaveExploits0References4Affected Software1
zdt
zdt
•added 2018/10/17 12:00 a.m.•51 views

LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting Vulnerability

LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities. Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Lin...

5.4AI score0.01652EPSS
SaveExploits6
Packet Storm
Packet Storm
•added 2018/10/17 12:00 a.m.•48 views

LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting

Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Link : http://pokkho.com/lango/auth/login Software : LANGO - Codeigniter Multilingual Script Version : 1.0...

5.2AI score0.01652EPSS
SaveExploits6
OSV
OSV
•added 2018/10/16 7:34 p.m.•31 views

GHSA-5C66-X4WM-RJFX Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)

Cross-site scripting XSS vulnerability in the user-profile biography section in DotNetNuke DNN before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element...

5.4CVSS5AI score0.00657EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2018/10/16 12:00 a.m.•128 views

WordPress Support Board 1.2.3 Cross Site Scripting

Exploit Title: Support Board - PHP & Wordpress Plugin v1.2.3 - HTML Injection and Stored XSS Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: https://schiocco.com/ Software Link : https://board.support/ Software : Support Board - Chat And Help Desk Version : v1.2.3 Vulernability...

5.6AI score0.00795EPSS
SaveExploits1
zdt
zdt
•added 2018/10/16 12:00 a.m.•43 views

Wordpress Support Board 1.2.3 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Support Board 1.2.3 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://schiocco.com/ Software Link : https://board.support/ Software : Support Board - Chat And Help Desk Version :...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/10/16 12:00 a.m.•559 views

WordPress Plugin Support Board 1.2.3 - Cross-Site Scripting

Exploit Title: Wordpress Plugin Support Board 1.2.3 - Cross-Site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: https://schiocco.com/ Software Link : https://board.support/ Software : Support Board - Chat And Help Desk Version : v1.2.3 Vulernability Type : Code...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/10/16 12:00 a.m.•34 views

WordPress Plugin Support Board 1.2.3 - Cross-Site Scripting

WordPress Plugin Support Board 1.2.3 - Cross-Site Scripting Exploit Title: Wordpress Plugin Support Board 1.2.3 - Cross-Site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: https://schiocco.com/ Software Link : https://board.support/ Software : Support Board - Chat And...

0.1AI score
SaveExploits0
Prion
Prion
•added 2018/10/15 7:29 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.9AI score0.0194EPSS
SaveExploits0References6Affected Software4
CNVD
CNVD
•added 2018/10/15 12:00 a.m.•14 views

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-18497)

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.480, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of multiple parameters...

6.1CVSS5.9AI score0.03207EPSS
SaveExploits3References1
CVE
CVE
•added 2018/10/14 9:00 p.m.•70 views

CVE-2018-18291

CVE-2018-18291 affects ASUS RT-AC58U (firmware 3.0.0.4.380_6516). It is a cross-site scripting (XSS) vulnerability, exploitable via multiple web interface pages (e.g., Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, etc.). ...

6.1CVSS6AI score0.0083EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/12 12:00 a.m.•3 views

CVE-2018-10141: Improper Neutralization of Input During Web Page Generation

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

6.1CVSS6.8AI score0.03883EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/10 12:00 a.m.•7 views

CVE-2018-18062: Improper Neutralization of Input During Web Page Generation

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.5AI score0.00813EPSS
SaveExploits3References2
CNVD
CNVD
•added 2018/10/08 12:00 a.m.•22 views

YMFE YApi Cross-Site Scripting Vulnerability

YMFE YApi is a visual interface management platform. A cross-site scripting vulnerability exists in the item name field in YMFE YApi version 1.3.23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

5.4CVSS5.2AI score0.00667EPSS
SaveExploits1References1
NVD
NVD
•added 2018/10/03 6:29 p.m.•34 views

CVE-2018-17053

Cross-site scripting XSS vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to login request parameters, a different vulnerability than CVE-2018-17054...

6.1CVSS6AI score0.00836EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2018/10/03 12:00 a.m.•46 views

RICOH MP C1803 JPN Printer - Cross-Site Scripting

Exploit Title: RICOH MP C1803 JPN Printer - Cross-Site Scripting Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.co.jp/mfp/mpc/1803/ Software : RICOH Printer Product Version: MP C1803 JPN Vulernability Type : Code Injectio...

6.1CVSS6.1AI score0.02324EPSS
SaveExploits9
zdt
zdt
•added 2018/10/03 12:00 a.m.•61 views

RICOH MP C1803 JPN Printer - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH MP C1803 JPN Printer - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.co.jp/mfp/mpc/1803/ Software : RICOH Printer Product Version: MP...

0.2AI score0.02324EPSS
SaveExploits9
exploitpack
exploitpack
•added 2018/10/03 12:00 a.m.•78 views

RICOH MP C1803 JPN Printer - Cross-Site Scripting

RICOH MP C1803 JPN Printer - Cross-Site Scripting Exploit Title: RICOH MP C1803 JPN Printer - Cross-Site Scripting Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link : https://www.ricoh.co.jp/mfp/mpc/1803/ Software : RICOH Printer Product Versio...

4.3CVSS0.02324EPSS
SaveExploits9
OSV
OSV
•added 2018/10/02 6:29 p.m.•37 views

CVE-2018-17595

In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /backend/ajax URI...

6.1CVSS6.3AI score
SaveExploits0References1
Rows per page
Query Builder