4822 matches found
CVE-2019-11656: Improper Neutralization of Input During Web Page Generation
Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2019-11279: Improper Neutralization of Special Elements used in a Command
CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user can escalate their own privileges to any scope, allowing them to take control of UAA and the resources it controls...
CVE-2019-14911: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS...
CVE-2016-10976: Improper Neutralization of Input During Web Page Generation
The safe-editor plugin before 1.2 for WordPress has no sesave authentication, with resultant XSS...
CVE-2019-13538: Improper Neutralization of Input During Web Page Generation
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source...
CVE-2019-10395: Improper Neutralization of Input During Web Page Generation
Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties...
CVE-2018-21012: Improper Neutralization of Input During Web Page Generation
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS...
CVE-2019-15816: Improper Neutralization of Input During Web Page Generation
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...
CVE-2019-15713: Improper Neutralization of Input During Web Page Generation
The my-calendar plugin before 3.1.10 for WordPress has XSS...
CVE-2015-9357: Improper Neutralization of Input During Web Page Generation
The akismet plugin before 3.1.5 for WordPress has XSS...
CVE-2015-9342: Improper Neutralization of Input During Web Page Generation
The wp-rollback plugin before 1.2.3 for WordPress has XSS...
CVE-2019-15331: Improper Neutralization of Input During Web Page Generation
The wp-support-plus-responsive-ticket-system plugin before 9.1.2 for WordPress has HTML injection...
CVE-2019-15110: Improper Neutralization of Input During Web Page Generation
The wp-front-end-profile plugin before 0.2.2 for WordPress has XSS...
CVE-2014-10377: Improper Neutralization of Input During Web Page Generation
The cforms2 plugin before 13.2 for WordPress has XSS in libajax.php...
CVE-2016-10910: Improper Neutralization of Input During Web Page Generation
The formbuilder plugin before 1.06 for WordPress has multiple XSS issues...
CVE-2016-10908: Improper Neutralization of Input During Web Page Generation
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS...
CVE-2019-14430: Improper Neutralization of Special Elements used in an SQL Command
plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection...
CVE-2016-10913: Improper Neutralization of Input During Web Page Generation
The wp-latest-posts plugin before 3.7.5 for WordPress has XSS...