Cross site scripting

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

CVE-2017-15515

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

CVE-2017-15515: Improper Neutralization of Input During Web Page Generation

NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field...

imagemagick/encoder_label_fuzzer: Crash in GlobExpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5643591676854272 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Cacti cross-site scripting vulnerability (CNVD-2019-14551)

Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. A cross-site scripting vulnerability exists in the 'Vertical Label' field of the graphtemplates.php file in versions of Cacti prior to 1.2.0, which stems fro...

DEBIAN-CVE-2018-20725

A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label...

CVE-2018-20725

A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label...

UBUNTU-CVE-2018-20725

A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label...

CVE-2018-20725

CVE-2018-20725 affects Cacti before 1.2.0, where graph_templates.php Graph Vertical Label could be exploited due to insufficient escaping of characters. Connected OSV entries indicate that the fix was delivered in updates to cacti/cacti-spine (e.g., openSUSE/SUSE packages) and that CVE-2018-20725...

CVE-2018-20725: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label...

PT-2019-10183

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting XSS issue exists due to the lack of escaping of unintended characters in the Graph Vertical Label. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or late...

Unauthenticated listing of labels

Issue the following HTTP request: code POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: wiki.domain.com Content-Length: 75 Content-Type: application/json "contentId":"0","macro":"name":"listlabels","params":"spaceKey":"TEST" code The service returns an HTML document containing a list of all labe...

label-magazine.com XSS vulnerability

Open Bug Bounty ID: OBB-703694 Description| Value ---|--- Affected Website:| label-magazine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

Microsoft Windows Unnamed Kernel Object Limit Elevation Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Unnamed Kernel Object. An attacker can exploit the vulnerability to cause elevation of privilege by defaulting the security descriptor...

The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...

The vulnerability of the JunOS operating system, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the JunOS operating system is related to the assignment of the zero pointer. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MPLS packet...

The vulnerability of the Routing Protocols Daemon (RPD) error handler on the JunOS operating system allows a attacker to cause a service failure.

The vulnerability of the Routing Protocols Daemon RPD error handler on the JunOS operating system is related to errors in resource release. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially crafted MPLS RSVP packet...

Netwide Assembler Null Pointer Dereference Vulnerability (CNVD-2019-05119)

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A null pointer dereference vulnerability exists in the 'findlabel' function of the asm/labels.c file in NASM version 2.14rc15, which can be exploited by an attacker to cause a denial of service null...

UBUNTU-CVE-2018-19209

Netwide Assembler NASM 2.14rc15 has a NULL pointer dereference in the function findlabel in asm/labels.c that will lead to a DoS attack...

CVE-2018-0050

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...