Lucene search
K

4739 matches found

Prion
Prion
added 2018/01/10 2:29 a.m.12 views

Cross site scripting

The Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack ...

4.3CVSS6AI score0.00378EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2018/01/09 10:29 p.m.10 views

CVE-2017-1000465

Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
Exploits0References1
NVD
NVD
added 2018/01/08 3:29 a.m.11 views

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

5.4CVSS5.6AI score0.0015EPSS
Exploits1References1
Prion
Prion
added 2018/01/08 3:29 a.m.15 views

Cross site scripting

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

3.5CVSS5.6AI score0.0015EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/01/08 3:0 a.m.15 views

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

5.6AI score0.0015EPSS
Exploits1References1
CNVD
CNVD
added 2018/01/05 12:0 a.m.1 views

Plone JavaScript Code Execution Vulnerability

Plone is the U.S. Plone Foundation's set of free and open source content management system CMS built on an application server Zope. The system is developed in Python language , suitable for web portals , internal and external corporate websites , document publishing systems and so on. A code...

5.4CVSS7.7AI score0.00287EPSS
Exploits0References1
Prion
Prion
added 2018/01/03 8:29 p.m.14 views

Cross site scripting

BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code...

3.5CVSS5.5AI score0.0032EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/01/03 8:0 p.m.11 views

CVE-2017-1000462

BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code...

5.5AI score0.0032EPSS
Exploits1References1
Prion
Prion
added 2018/01/03 3:29 p.m.13 views

Cross site scripting

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

3.5CVSS5.4AI score0.00296EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/01/03 3:29 p.m.17 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
Exploits0References1
NVD
NVD
added 2018/01/03 3:29 p.m.8 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.3AI score0.00296EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/01/03 3:0 p.m.11 views

CVE-2017-1000467

LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code...

5.3AI score0.00296EPSS
Exploits0References1
CVE
CVE
added 2018/01/03 3:0 p.m.41 views

CVE-2017-1000467

CVE-2017-1000467 concerns LavaLite 5.2.4 with a stored cross-site scripting vulnerability on the blog creation page, which can lead to disruption of service and execution of JavaScript. The connected documents consistently reference the same issue across multiple sources (Red Hat, GHSA, CNVD, CVE...

5.4CVSS5.2AI score0.00296EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/01/03 1:29 a.m.9 views

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.3AI score0.00233EPSS
Exploits1References1
Prion
Prion
added 2018/01/03 1:29 a.m.10 views

Cross site scripting

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

3.5CVSS5.4AI score0.00233EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/01/03 1:29 a.m.12 views

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
Exploits0References1
Cvelist
Cvelist
added 2018/01/03 1:0 a.m.9 views

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

5.3AI score0.00233EPSS
Exploits1References1
NVD
NVD
added 2018/01/03 12:29 a.m.7 views

CVE-2017-1000463

Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.3AI score0.00296EPSS
Exploits0References1
OSV
OSV
added 2018/01/03 12:29 a.m.13 views

CVE-2017-1000463

Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...

5.4CVSS5.6AI score
Exploits0References1
Cvelist
Cvelist
added 2018/01/03 12:0 a.m.14 views

CVE-2017-1000463

Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code...

5.3AI score0.00296EPSS
Exploits0References1
Rows per page
Query Builder