CVE-2022-45017

A cross-site scripting XSS vulnerability in the Overview Page settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Loop field...

WBCE CMS 跨站脚本漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in WBCE CMS 1.5.4 and previous versions, which stems from the lack of effective filtering and escaping of user-supplied data in the Post Loop field of the Overview Page...

CVE-2022-45017: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Overview Page settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Loop field...

The vulnerability of the PDF Templates Overview Page component of the Better PDF Exporter Add-on allows an attacker to execute XSS attacks.

The vulnerability of the PDF Templates Overview Page component of the Better PDF Exporter for Jira software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2022-5074

Name of the Vulnerable Software and Affected Versions Better PDF Exporter for Jira version 10.0.0 Description The issue exists due to insufficient protection of the web page structure in the PDF Templates Overview Page component. This allows a remote attacker to conduct a cross-site scripting XSS...

GHSA-H6QC-455M-7V6V Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin

Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Agent/Configure permission. Matrix Project Plugin 1.17 escapes the node...

GHSA-VPM6-H53M-X2XF Drupal improper access restrictions

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.3 bug fix, security, and image updates

Red Hat Advanced Cluster Management for Kubernetes 2.3.3 General Availability release images, which fix bugs, provide security fixes, and update container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS ba...

CVE-2020-5944

In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-classified it as a defect. CVE-2020-5944...

CVE-2020-2224: Improper Neutralization of Input During Web Page Generation

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability...

CVE-2019-9709

An issue was discovered in Mahara 17.10 before 17.10.8, 18.04 before 18.04.4, and 18.10 before 18.10.1. The collection title is vulnerable to Cross Site Scripting XSS due to not escaping it when viewing the collection's SmartEvidence overview page if that feature is turned on. This can be exploit...

PT-2019-19812

Name of the Vulnerable Software and Affected Versions Mahara versions 17.10 through 17.10.7 Mahara versions 18.04 through 18.04.3 Mahara versions 18.10 through 18.10.0 Description An issue was discovered where the collection title is vulnerable to Cross Site Scripting XSS due to not escaping it...

CVE-2018-3190: Undefined Security Weakness

Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite subcomponent: Overview Page/Report Rendering. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

PT-2018-2235

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Overview Page/Report Rendering subcomponent of Oracle E-Business Intelligence. This can be exploited by a remote attack...

dmexco.de XSS vulnerability

Vulnerable URL: http://dmexco.de/Conference/en/Overview.html?Day=2" Details: Description| Value ---|--- Patched:| Yes, at 25.01.2017 Latest check for patch:| 25.01.2017 05:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61939 VIP website status:| No Check...

opensecrets.org XSS vulnerability

Vulnerable URL: http://www.opensecrets.org/pfds/overview.php?type=W=2014"...

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Overview Page/Report Rendering Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Overview Page/Report Rendering component, which could be exploited by remote attackers to submit a special reques...

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Overview Page/Report Rendering Component (CNVD-2016-00598)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Overview Page/Report Rendering component, which could be exploited by remote attackers to submit a special reques...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2015-07821)

CloudBees Jenkins is the open source continuous integration server. A cross-site scripting vulnerability exists in CloudBees Jenkins 1.638, LTS versions prior to 1.625.2, in the slave overview page, where a remote user with certain privileges can inject web script or HTML via a slave offline stat...

CVE-2015-5326

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...