Lucene search
K

25 matches found

CNVD
CNVD
added 2026/01/19 12:0 a.m.2 views

WordPress Kunze Law plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Kunze Law plugin, which originates from obtaining HTML content from a remote server and injecting it into a page...

4.4CVSS6AI score0.00048EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.3 views

WordPress plugin Kunze Law 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Kunze Law plugin, which originates from obtaining HTML content from a remote server and injecting it into a page...

4.4CVSS6AI score0.00048EPSS
Exploits0References3
NVD
NVD
added 2026/01/08 12:15 a.m.1 views

CVE-2019-25280

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions...

6.1CVSS0.00074EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/07 11:11 p.m.25 views

CVE-2019-25280 Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions...

6.1CVSS0.00074EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/26 12:0 a.m.2 views

IBM Aspera Faspex 安全漏洞

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person file delivery and collaboration. A security vulnerability exists in IBM Aspera Faspex 5 5.0.14.1 and prior versions, which originates from a remote attacker who can inject malicious HTML code th...

5.4CVSS6.7AI score0.00019EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-0188

Malware in sbrugna...

4.3CVSS7.3AI score0.00333EPSS
Exploits1References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-3225

Malware in sbrugna...

4.3CVSS6.2AI score0.00525EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-7444

Malware in sbrugna...

6.1CVSS6.3AI score0.00793EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 3:37 a.m.6 views

CVE-2015-5356

Cross-site scripting XSS vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter...

4.3CVSS5.9AI score0.00296EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/09/08 12:0 a.m.2 views

PT-2023-23733 · Ibm · Ibm Maximo Application Suite +1

Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite versions 8.9 through 8.10 IBM Maximo Asset Management versions 7.6.1.2 through 7.6.1.3 Description: A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web...

5.4CVSS5.3AI score0.00062EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.1 views

SUSE CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

6.8CVSS6.2AI score0.02243EPSS
Exploits0References4
OSV
OSV
added 2020/09/27 8:6 p.m.8 views

MGASA-2020-0374 Updated novnc package fixes a security vulnerability

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name. CVE-2017-18635...

6.1CVSS6.2AI score0.06495EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2019/07/25 12:0 a.m.82 views

Yahei-PHP Prober 0.4.7 HTML Injection

Yahei-PHP Prober v0.4.7 speed Remote HTML Injection Vulnerability Vendor: Yahei.Net Product web page: http://www.yahei.net Affected version: 0.4.7 Summary: Detection of system web server operating environment. Desc: Input passed to the GET parameter 'speed' is not properly sanitised before being...

Exploits0
OSV
OSV
added 2019/04/29 4:29 p.m.0 views

CVE-2019-3562

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11...

6.1CVSS6.6AI score0.00371EPSS
Exploits0References1
CNVD
CNVD
added 2018/10/08 12:0 a.m.3 views

YMFE YApi Cross-Site Scripting Vulnerability

YMFE YApi is a visual interface management platform. A cross-site scripting vulnerability exists in the item name field in YMFE YApi version 1.3.23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References1
CNVD
CNVD
added 2018/08/22 12:0 a.m.1 views

Cross-site scripting vulnerability in multiple IBM products (CNVD-2018-24625)

IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...

5.4CVSS5.4AI score0.00078EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/20 12:0 a.m.1 views

Cross-Site Scripting Vulnerability in Multiple EMC Products

EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA Identity Management and Governance are products of EMC Corporation.EMC RSA Identity Governance and Lifecycle is a suite of lifecycle management solutions; EMC RSA Identity Management and Governance IMG is a suite...

5.4CVSS5.5AI score0.00193EPSS
Exploits0References1
CNVD
CNVD
added 2016/02/19 12:0 a.m.1 views

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2016-01170)

SharePoint Server is an integrated suite of server capabilities that provides comprehensive content management and enterprise search, accelerates shared business processes and simplifies information sharing across boundaries. Microsoft SharePoint Foundation 2013 SP1 has a cross-site scripting...

6.1CVSS5.8AI score0.01227EPSS
Exploits0References1
CNVD
CNVD
added 2015/08/10 12:0 a.m.2 views

Mozilla Firefox OS Cross-Site Scripting Vulnerability (CNVD-2015-05193)

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, Gaia's Search application suffers from multiple cross-site scripting vulnerabilities in its implementation. A remote attacker could exploit these vulnerabilities to...

4.3CVSS6.1AI score0.00263EPSS
Exploits0References1
securityvulns
securityvulns
added 2011/08/10 12:0 a.m.115 views

[security bulletin] HPSBMU02695 SSRT100480 rev.1 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02942411 Version: 1 HPSBMU02695 SSRT100480 rev.1 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access NOTICE: The information in this Security Bulletin should be acted up...

6.4CVSS0.8AI score0.0205EPSS
Exploits0
Rows per page
Query Builder