Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In Bootstrap, XSS is possible in the tooltip data-viewport attribute...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In Bootstrap, XSS is possible in the affix configuration target property...

CVE-2018-17904: Improper Neutralization of Input During Web Page Generation

Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This vulnerability could allow an unauthorized attacker to inject arbitrary code...

CVE-2018-18262: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

CVE-2018-8846

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is then served to other users...

PT-2018-18042

Name of the Vulnerable Software and Affected Versions ZTE MF65 versions prior to V1.0.0B05 ZTE MF65M1 versions prior to V1.0.0B02 Description The issue is related to cross-site scripting due to improper neutralization of input during web page generation. This could allow an attacker to conduct...

Multiple vulnerabilities in the CLI analyzer of the Cisco IOS XE operating system, allowing attackers to execute arbitrary commands

The multiple vulnerabilities of the Cisco IOS XE operating system’s CLI analyzer are related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting these vulnerabilities can allow attackers to gain access to the device’s Linux shell and...

CVE-2018-1005: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

CVE-2018-7508

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized...

CVE-2018-7508

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized...

CVE-2018-7508

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized...

PT-2018-18114

Name of the Vulnerable Software and Affected Versions OSIsoft PI Web API versions 2017 R2 and prior Description A Cross-site Scripting issue was discovered. This may occur when input is incorrectly neutralized. Recommendations For OSIsoft PI Web API versions 2017 R2 and prior, update to a version...

CVE-2018-7508: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized...

CVE-2018-7447: Improper Neutralization of Input During Web Page Generation

mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields...

CVE-2018-0201

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...

Trend Micro Email Encryption Gateway Multiple Vulnerabilities

1. Advisory Information Title: Trend Micro Email Encryption Gateway Multiple Vulnerabilities Advisory ID: CORE-2017-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Date published: 2018-02-21 Date of last update:...

CVE-2017-16880: Improper Neutralization of Input During Web Page Generation

The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Multiple cross-site scripting XSS vulnerabilities in the mailto helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 name or 2 email value...

CVE-2014-0141: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Red Hat Satellite 6.0.3...

QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities

--- Advisory details --- Title: QuantaStor Software Define Storage mmultiple vulnerabilities Advisory ID: VVVSEC-2017-6943 Advisory URL: http://www.vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt Date published: 12/08/2017 CVEs: CVE-2017-9978 "Brute force login request using http...