2168 matches found
PT-2021-22021
Name of the Vulnerable Software and Affected Versions: btcpayserver affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...
PT-2021-21951
Name of the Vulnerable Software and Affected Versions: adminlte affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly validate user input,...
CVE-2021-36785: Improper Neutralization of Input During Web Page Generation
The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...
CVE-2021-36946: Improper Neutralization of Input During Web Page Generation
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...
CVE-2021-37542: Improper Neutralization of Input During Web Page Generation
In JetBrains TeamCity before 2020.2.3, XSS was possible...
CVE-2021-27659: Improper Neutralization of Input During Web Page Generation
exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...
CVE-2021-27658: Improper Neutralization of Input During Web Page Generation
exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...
CVE-2021-27479: Improper Neutralization of Input During Web Page Generation
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users...
PT-2021-7987
Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, where the affected applications do not validate webpage input. This could allow ...
CVE-2021-20683: Improper Neutralization of Input During Web Page Generation
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
PT-2021-2957
Name of the Vulnerable Software and Affected Versions Adobe Coldfusion versions 2016 update 16 and earlier Adobe Coldfusion versions 2018 update 10 and earlier Adobe Coldfusion version 2021.0.0.323925 Description The issue is related to improper neutralization of input during web page generation,...
CVE-2020-35571: Improper Neutralization of Input During Web Page Generation
An issue was discovered in MantisBT through 2.24.3. In the helperensureconfirmed call in managecustomfieldupdate.php, the custom field name is not sanitized. This may be problematic depending on CSP settings...
Revive Adserver 5.1.0 Cross Site Scripting
======================================================================== Revive Adserver Security Advisory REVIVE-SA-2021-002 ------------------------------------------------------------------------ https://www.revive-adserver.com/security/revive-sa-2021-002...
CVE-2020-28470: Improper Neutralization of Input During Web Page Generation
This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...
CVE-2020-35818: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBR20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...
CVE-2020-35202: Improper Neutralization of Input During Web Page Generation
Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS...
PT-2020-19624
Name of the Vulnerable Software and Affected Versions EcoStruxure and SmartStruxure Power Monitoring and SCADA Software affected versions not specified Description A CWE-79: Improper Neutralization of Input During Web Page Generation issue exists that could allow an attacker to perform actions on...
CVE-2020-7546: Improper Neutralization of Input During Web Page Generation
A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow an attacker to perform actions on behalf of the authorized user when...
Cross site scripting
A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation Cross-site Scripting Reflected vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of use...