2168 matches found
CVE-2017-18785: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D6200 before 1.1.00.24, D6220 before 1.0.0.32, D6400 before 1.0.0.66, D7000 before 1.0.1.52, D7000v2 before 1.0.0.44, D7800 before 1.0.1.30, D8500 before 1.0.3.35,...
CVE-2017-18832: Improper Neutralization of Input During Web Page Generation
Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before...
CVE-2020-1050: Improper Neutralization of Input During Web Page Generation
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1049...
CVE-2020-6231: Improper Neutralization of Input During Web Page Generation
SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2020-6217: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...
CVE-2020-6229: Improper Neutralization of Input During Web Page Generation
SAP NetWeaver AS ABAP Business Server Pages application CRMBSPFRAME, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...
CVE-2020-6222: Improper Neutralization of Input During Web Page Generation
SAP Business Objects Business Intelligence Platform Web Intelligence HTML interface, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2020-11626: Improper Neutralization of Input During Web Page Generation
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting XSS vulnerabilities have been found in the Public Web and the Certificate/CRL download servlets...
CVE-2020-0700: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'...
PT-2020-2061
Name of the Vulnerable Software and Affected Versions Andover Continuum All versions Description A Cross-site Scripting vulnerability exists, which could cause a Reflective Cross-site Scripting attack when using the product's web server. This issue is related to the improper neutralization of inp...
CVE-2011-1084: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Smoothwall Express 3...
CVE-2019-15586: Improper Neutralization of Input During Web Page Generation
A XSS exists in Gitlab CE/EE 12.1.10 in the Mermaid plugin...
CVE-2020-8421: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS attacks in comactionlogs...
CVE-2013-0286: Improper Neutralization of Input During Web Page Generation
Pinboard 1.0.6 theme for Wordpress has XSS...
CVE-2020-6843: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
CVE-2019-14863: Improper Neutralization of Input During Web Page Generation
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
CVE-2019-14862: Improper Neutralization of Input During Web Page Generation
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it...
CVE-2013-4692: Improper Neutralization of Input During Web Page Generation
Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS...
PT-2019-13481
Name of the Vulnerable Software and Affected Versions Siemens AG Polarion versions prior to 19.2 Description The issue is related to improper neutralization of input during web page generation, which could allow an attacker to exploit a reflected Cross-site Scripting XSS vulnerability...