2169 matches found
CVE-2023-3294: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7...
CVE-2023-33132: Improper Neutralization of Input During Web Page Generation
Microsoft SharePoint Server Spoofing Vulnerability...
CVE-2023-33130: Improper Neutralization of Input During Web Page Generation
Microsoft SharePoint Server Spoofing Vulnerability...
CVE-2023-21565: Improper Neutralization of Input During Web Page Generation
Azure DevOps Server Spoofing Vulnerability...
CVE-2023-2949: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-22654: Improper Neutralization of Input During Web Page Generation
Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser. Affected products and versions are as follows: T&D Corporation data logger products TR-71W/7...
CVE-2023-31154 Improper Neutralization of Input During Web Page Generation
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...
CVE-2022-47436
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14...
CVE-2023-2591
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Cross site scripting
A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...
CVE-2023-29201: Improper Neutralization of Input During Web Page Generation
XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped...
CVE-2023-28314: Improper Neutralization of Input During Web Page Generation
Microsoft Dynamics 365 on-premises Cross-site Scripting Vulnerability...
CVE-2023-1754
Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1754: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-27489: Improper Neutralization of Input During Web Page Generation
Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could potentially contain JavaScript code. If SVG images are viewed directly, i.e. not rendered in an HTML page, this JavaScript code could execute. This...
CVE-2023-28655: Improper Neutralization of Input During Web Page Generation
A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context of the targeted privileged users...
CVE-2023-1051
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...