Lucene search
K

3747 matches found

OSV
OSV
added 2016/08/19 9:59 p.m.2 views

CVE-2016-3195

Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score
Exploits0References3
OSV
OSV
added 2016/08/19 9:59 p.m.2 views

CVE-2016-3194

Cross-site scripting XSS vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.00296EPSS
Exploits0References3
OSV
OSV
added 2016/08/09 8:59 p.m.2 views

CVE-2016-4168

Cross-site scripting XSS vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.00641EPSS
Exploits0References3
OSV
OSV
added 2016/08/03 1:59 a.m.1 views

CVE-2016-4833

Cross-site scripting XSS vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score
Exploits0References5
CNVD
CNVD
added 2016/08/02 12:0 a.m.5 views

Novell Filr Cross-Site Scripting Vulnerability (CNVD-2016-05959)

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site scripting vulnerability exists in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier. The vulnerability can be exploited by a remote attacker to inject arbitrary we...

5.4CVSS6AI score0.01356EPSS
Exploits4References1
CNVD
CNVD
added 2016/07/24 12:0 a.m.1 views

Collectd-web 'ajax_post.php' cross-site scripting vulnerability

Collectd-web is a set of web-based front-end tools for collectd to collect RRD data. Collectd-web suffers from a cross-site scripting vulnerability that allows remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

5.9AI score
Exploits0References1
CNVD
CNVD
added 2016/07/18 12:0 a.m.1 views

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2016-04942)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server CWMS version 2.6. A remote attacker can...

6.1CVSS6.3AI score0.00296EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the integrity of protected information.

Cross-site scripting XSS in Adobe Pepper Flash for Google Chrome allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.03466EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of the Flash Player software, which allows a malicious attacker to compromise the integrity of protected information

Cross-site scripting XSS in the Adobe Flash Player allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.00974EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the integrity of protected information.

Cross-site scripting XSS in Adobe Pepper Flash for Google Chrome allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.00974EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.1 views

The vulnerability of Acrobat software allows a malicious individual to compromise the integrity of protected information.

XSS Cross-Site Scripting in Acrobat for OS X allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.5AI score0.00649EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the integrity of protected information.

Cross-site scripting XSS in Adobe Pepper Flash for Google Chrome allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.00974EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of the Flash Player software, which allows a malicious attacker to compromise the integrity of protected information

Cross-site scripting XSS in the Adobe Flash Player allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.00974EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of the Flash Player software, which allows a malicious attacker to compromise the integrity of protected information

Cross-site scripting XSS in the Adobe Flash Player allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.4AI score0.03466EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2016/07/05 12:0 a.m.1 views

IBM Cognos Business Intelligence Cognos TM1 Cross-Site Scripting Vulnerability

IBM Cognos Business Intelligence BI is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in making adjustments to their decisions by analyzing key factors and key stakeholders, etc. IBM Cogn...

5.4CVSS6AI score0.00199EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/05 12:0 a.m.2 views

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-04565)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in...

6.1CVSS8.8AI score0.00493EPSS
Exploits0References1
OSV
OSV
added 2016/07/03 9:59 p.m.1 views

CVE-2016-2862

Cross-site scripting XSS vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

6.1CVSS5.9AI score0.00427EPSS
Exploits0References7
OSV
OSV
added 2016/07/03 1:59 a.m.1 views

DEBIAN-CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

6.1CVSS7AI score0.01085EPSS
Exploits0References1
OSV
OSV
added 2016/07/03 1:59 a.m.1 views

UBUNTU-CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

6.1CVSS7AI score0.01085EPSS
Exploits0References3
OSV
OSV
added 2016/06/29 2:10 p.m.5 views

CVE-2016-5834

Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...

6.1CVSS6AI score
Exploits0References7
Rows per page
Query Builder