CyBroHttpServer Cross-Site Scripting Vulnerability

Cybrotech CyBroHttpServer is a communication server for reading/writing CyBro variables by name from Cybrotech UK. A cross-site scripting vulnerability exists in Cybrotech CyBroHttpServer version 1.0.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via a...

UBUNTU-CVE-2017-15429

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2017-15430

Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

Zyxel VMG3312-B10B cross-site scripting vulnerability (CNVD-2018-17658)

The Zyxel VMG3312 B10B is an Internet access gateway device from Hopkins ZyXEL Technology. A cross-site scripting vulnerability exists in the Zyxel VMG3312 B10B. A remote attacker can exploit this vulnerability by sending the 'hostname' parameter to the...

tp5cms Cross-site Scripting Vulnerability

tp5cms is a content management system CMS framework written in the PHP language and based on technologies such as ThinkPHP, swiper and bootstrap. A cross-site scripting vulnerability exists in tp5cms 2017-05-25 and earlier versions. A remote attacker can exploit this vulnerability to inject...

Cisco Small Business 300 Series (Sx300) Managed Switches Cross-Site Scripting Vulnerability

Cisco Small Business 300 Series Sx300 Managed Switches is a 300 series switch device from the American company Cisco Cisco. A cross-site scripting vulnerability exists in the web-based management interface of the Cisco Small Business 300 Series Sx300 Managed Switches, which stems from the interfa...

CVE-2018-14503

Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

HPE XP P9000 Command View Advanced Edition Software Cross-Site Scripting Vulnerability

HPE XP P9000 Command View Advanced Edition Software CVAE is a suite of device management software from Hewlett Packard Enterprise HPE that enables storage management for HPE XP P9000 disk array products.DevMgr , TSMgr, and RepMgr are among the management modules. A cross-site scripting...

QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10275)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/slideshow.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

CA API Developer Portal Cross-Site Scripting Vulnerability (CNVD-2018-17503)

CA API Developer Portal is a set of CA's API Application Programming Interface query function for software developers. A cross-site scripting vulnerability exists in CA API Developer Portal version 4.x, versions prior to 4.2.5.3, and versions prior to 4.2.7.1, which originates when the program...

Subrion cross-site scripting vulnerability (CNVD-2018-14782)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in uploads/.htaccess in Subrion CMS version 4.2.1, which stems...

Red Hat Satellite Cross-Site Scripting Vulnerability (CNVD-2018-15904)

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A cross-site scripting vulnerability exists in the Failed Systems page in...

CVE-2018-12943

Cross-Site Scripting XSS vulnerability in every page that includes the "action" URL parameter in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

GitLab CE and EE Cross-Site Scripting Vulnerability (CNVD-2019-06641)

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. A cross-site scriptin...

idreamsoft iCMS cross-site scripting vulnerability (CNVD-2018-14096)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in versions of idreamsoft iCMS prior to 7.0.10. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML via the fourth and fif...

Code Execution Vulnerability in POSCMS v3.2.0 (Free Edition)

POSCMS PhpOpenSourceCMS is a PHP and MySQL based, open source, cross-platform web content management system CMS. A code execution vulnerability exists in POSCMS v3.2.0 free version. The vulnerability is due to improper filtering of user input in the background, an attacker can exploit the...

Cisco Unified Presence Cross-Site Scripting Vulnerability (CNVD-2018-14097)

Cisco Unified Communications Manager CUCM, Unified CM is a call processing component of a unified communications system from Cisco.Cisco Unified Communications Manager IM and Presence Cisco Unified Communications Manager IM and Presence Service is a CUCM-based instant messaging IM and status...

Cisco Webex Cross-Site Scripting Vulnerability (CNVD-2018-14204)

Cisco WebEx is the United States Cisco Cisco company's set of Web conferencing tools, the tool can assist off-site office workers to coordinate and collaborate.WebEx services include Web conferencing, telepresence video conferencing and enterprise instant messaging IM. A cross-site scripting...

Rocket.Chat Cross-Site Scripting Vulnerability

Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the registration form of Rocket.Chat versions prior to 0.66. A remote attacker can exploit this vulnerability to inject arbitrar...