Roundcube Webmail - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in messagebody in program/actions/mail/show.php. id: CVE-2024-42009 info: name:...

Apache OFBiz <=16.11.07 - Cross-Site Scripting

Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized. id: CVE-2020-1943 info: name: Apache OFBiz =16.11.07 - Cross-Site Scripting author: pdteam severity: medium description: Apache OFBiz 16.11.01 to 16.11.07 ...

CVE-2022-43332

CVE-2022-43332 Межсайтовый скриптинг в WonderCMS Описание: Уязвимость межсайтового скриптинга XSS в Wondercms v3.3.4 позволяет потенциальным злоумышленникам выполнять произвольные веб-сценарии или HTML через вредоносную полезную нагрузку, внедрённую в поле "Название сайта" панели конфигурации — в...

CVE-2022-3942

CVE-2022-3942 소독 관리 시스템의 교차 사이트 스크립팅 설명: Sanitization Management System v1.0의 교차 사이트 스크립팅XSS 취약점으로 인해, 잠재적 공격자가 요청 견적서Request Quote Form의 비고란 또는 주소 필드에 조작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 로그인된 직원 또는 관리자가 해당 견적서를 열면 XSS가 트리거되며, 쿠키에 HttpOnly 플래그가 설정되어 있지 않기 때문에 이 취약점을 이용해 로그인된 사용자의 쿠키를 탈취할...

Exploite-CVE-2023-30212-vulnerability

создание уязвимой Docker-среды, подверженной CVE-2023-30212 Описание Docker-среда и эксплуатация уязвимости CVE-2023-30212. CVE-2023-30212 — это уязвимость безопасности, затрагивающая версии OURPHP до 7.2.0 включительно. Эта уязвимость позволяет проводить атаки с использованием межсайтового...

CVE-2023-30212

CVE-2023-30212 Окружение Docker и эксплуатация CVE-2023-30212 — это уязвимость безопасности, которая затрагивает версии OURPHP до или равных версии 7.2.0 .Эта уязвимость позволяет осуществлять межсайтовый скриптинг XSS атаки...

Fedora 43 : chromium (2026-cd4e714c4e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cd4e714c4e advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...

Cisco ASA Cross-site Scripting (CVE-2019-12695)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web- based management interface of an...

RHEL 9 : grafana (RHSA-2026:76795)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76795 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/x509:...

Debian dsa-6545 : roundcube - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6545 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/...

SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...

PT-2026-106795

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a use...

RHCOS 4 : Red Hat build of MicroShift 4.21.36 (RHSA-2026:74796)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74796 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...

Cisco ASA/FTD Cross-site Scripting (CVE-2020-3582)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

Debian dsa-6546 : rails - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6546 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6546-1 [email protected] https://www.debian.org/securit...

Cisco ASA Cross-site Scripting (CVE-2024-20341)

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...

Cisco ASA Cross-site Scripting (CVE-2020-3580)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

Cisco ASA Cross-site Scripting (CVE-2019-1701)

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the WebVPN portal of an affected device. Th...

CVE-2021-39476

CVE-2021-39476 Обнаружено несколько XSS-уязвимостей в PhoenixCart 1.0.8.0 2 XSS на одной странице "Редактировать заголовок категории для SEO:" "Редактировать описание категории" Ссылка: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...