PT-2020-15967

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description The issue allows for Cross-Site Scripting XSS due to the ability to inject and store malicious JavaScript code. This can occur via the role name or role descr...

Cross-site Scripting Vulnerability in Tianti CMS (CNVD-2019-09099)

Ladder tianti is a free lightweight CMS system written in Java. A stored cross-site scripting vulnerability exists in the user list module in tianti 2.3, which can be exploited by an attacker via the tianti-module-admin/user/ajax/saverole name parameter to conduct a cross-site scripting attack...

springboot_authority cross-site scripting vulnerability

springbootauthority is a backend management system. The system includes modules for user management, role management, and resource connection management. A cross-site scripting vulnerability exists in the admin/role/edit page in springbootauthority 2017-03-06 and earlier versions, which can be...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

PT-2017-7226

Name of the Vulnerable Software and Affected Versions TeamPass versions 2.1.24 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the label value of an item or the name of a role. This can lead to cross-site scripting XSS attacks. Recommendations...

CVE-2015-7562: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2016-4318

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name...

CVE-2016-4318

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name...

CVE-2016-4318

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name...

CVE-2016-4318: Improper Neutralization of Input During Web Page Generation

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name...

PT-2017-8472

Name of the Vulnerable Software and Affected Versions Atlassian JIRA Server versions prior to 7.1.9 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs in the project/ViewDefaultProjectRoleActors.jspa file via a role name. Recommendations For versions prior to 7.1.9,...

CVE-2016-5424

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a 1 " double quote, 2 \ backslash, 3 carriage return, or 4 newline character ...

PT-2016-6421

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 9.1.23 PostgreSQL versions 9.2.x prior to 9.2.18 PostgreSQL versions 9.3.x prior to 9.3.14 PostgreSQL versions 9.4.x prior to 9.4.9 PostgreSQL versions 9.5.x prior to 9.5.4 Description The issue allows remote...

TeamPass Cross-Site Scripting Vulnerability (CNVD-2017-06209)

TeamPass is a dedicated password manager for Apache, MySQL and PHP. A cross-site scripting vulnerability exists in TeamPass 2.1.24 and earlier versions. A remote attacker can inject arbitrary web script or HTML with 1 label value of an item or 2 name of a role...

PT-2015-2428

Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.091.00.1418659308 Description The issue exists due to insufficient protection of the web page structure in the Development Workbench component of the SAP HANA database management system. This allows a remote attacker t...

CVE-2015-7726: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allows remote authenticated users to inject arbitrary web script or HTML via the role name, aka SAP Security Note 2153898...

CVE-2014-8743

Multiple cross-site scripting XSS vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a 1 Role or 2 Organic Group name...

PT-2014-8702

Name of the Vulnerable Software and Affected Versions Drupal Maestro module versions prior to 7.x-1.4 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Role or Organic Group name. Recommendations For versions prior to...

CVE-2014-8743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a 1 Role or 2 Organic Group name...