607 matches found
CVE-2018-1000516: Improper Neutralization of Input During Web Page Generation
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...
CVE-2018-4943
Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app...
CVE-2018-4943
Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app...
CVE-2018-4943
Adobe PhoneGap Push Plugin
CVE-2018-4943
Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app...
PT-2018-16644
Name of the Vulnerable Software and Affected Versions Adobe PhoneGap Push Plugin versions 1.8.0 and earlier Description The issue concerns a Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app...
CVE-2018-4943: Improper Input Validation
Adobe PhoneGap Push Plugin versions 1.8.0 and earlier have an exploitable Same-Origin Method Execution vulnerability. Successful exploitation could lead to JavaScript code execution in the context of the PhoneGap app...
CVE-2018-1000162
Parsedown version prior to 1.7.0 contains a Cross Site Scripting XSS vulnerability in setMarkupEscaped for escaping HTML that can result in JavaScript code execution. This attack appears to be exploitable via specially crafted markdown that allows it to side step HTML escaping by breaking AST...
PT-2018-9333
Name of the Vulnerable Software and Affected Versions Parsedown versions prior to 1.7.0 Description The issue concerns a Cross Site Scripting XSS vulnerability in the setMarkupEscaped function for escaping HTML, which can result in JavaScript code execution. This can be exploited via specially...
GHSA-82GW-PQF7-Q3J2 pym.js CSRF Vulnerability
NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross Site Request Forgery CSRF vulnerability in Pym.js onNavigateToMessage function. https://github.com/nprapps/pym.js/blob/master/src/pym.jsL573 can result in Arbitrary javascript code execution. This attack appears to be...
Cross site request forgery (csrf)
NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross ite Request Forgery CSRF vulnerability in Pym.js onNavigateToMessage function. https://github.com/nprapps/pym.js/blob/master/src/pym.jsL573 that can result in Arbitrary javascript code execution. This attack appear to be...
CVE-2018-1000086
NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross ite Request Forgery CSRF vulnerability in Pym.js onNavigateToMessage function. https://github.com/nprapps/pym.js/blob/master/src/pym.jsL573 that can result in Arbitrary javascript code execution. This attack appear to be...
CVE-2018-1000086: Cross-Site Request Forgery (CSRF)
NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 contains a Cross ite Request Forgery CSRF vulnerability in Pym.js onNavigateToMessage function. https://github.com/nprapps/pym.js/blob/master/src/pym.jsL573 that can result in Arbitrary javascript code execution. This attack appear to be...
PT-2018-9265
Name of the Vulnerable Software and Affected Versions: Pym.js versions 0.4.2 through 1.3.1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability in the onNavigateToMessage function of Pym.js. This can result in arbitrary JavaScript code execution. The attack is exploitab...
CVE-2017-1000509
Dolibarr version 6.0.2 contains a Cross Site Scripting XSS vulnerability in Product details that can result in execution of javascript code...
PT-2018-5274
Name of the Vulnerable Software and Affected Versions Croogo versions prior to 4.x Description The issue is related to a Cross Site Scripting XSS vulnerability in the Page name, which can lead to the execution of javascript code. Recommendations For Croogo versions prior to 4.x, update to version...
PT-2018-5272
Name of the Vulnerable Software and Affected Versions Invoice Plane versions 1.5.4 and earlier Description The issue is related to a Cross Site Scripting XSS vulnerability in the Client's details, which can lead to the execution of javascript code. Recommendations For Invoice Plane versions 1.5.4...
CVE-2017-1000465
Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code...
Plone JavaScript Code Execution Vulnerability
Plone is the U.S. Plone Foundation's set of free and open source content management system CMS built on an application server Zope. The system is developed in Python language , suitable for web portals , internal and external corporate websites , document publishing systems and so on. A code...