CVE-2020-23214

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Configure categories" field under the "Categorise Lists" module...

CVE-2020-23209

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "List Description" field under the "Edit A List" module...

Cross site scripting

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Edit Values" field under the "Configure Attributes" module...

CVE-2021-35303: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute...

CVE-2021-34243: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability was discovered in Ice Hrm 29.0.0.OS which allows attackers to execute arbitrary web scripts or HTML via a crafted file uploaded into the Document Management tab. The exploit is triggered when a user visits the upload location of the crafted file...

PT-2020-6387

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description A stored cross site scripting XSS issue exists in the /administration/settings registration.php file, allowing authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entere...

Cross-site Scripting (XSS)

squirrelmail is vulnerable to cross-site scripting XSS. The vulnerability exists as a remote attacker could use this flaw to send a specially-crafted Multipurpose Internet Mail Extensions MIME message that, when opened by a victim, would lead to arbitrary web script execution in the context of...

Cross site scripting

A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DO...

Cross-Site Scripting Vulnerability in Multiple TIBCO Products

TIBCO Spotfire Automation Services are products of TIBCO Software, Inc. Spotfire Automation Services is a suite of tools for running automated analyses; Spotfire Professional is a comprehensive analytics platform for all aspects of business analysts and users. Spotfire Professional is a...

ZOHO ManageEngine ServiceDesk Plus HTML Injection Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. An HTML injection vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which stems from the program's inability to adequately filte...

Microsoft Internet Explorer Arbitrary Web Script Execution Vulnerability

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security mechanism bypass vulnerability exists in Microsoft Internet Explorer 11 that could allow a remote attacker to execute arbitrary web scripts with privileges via a...

Fortinet FortiOS HTML Injection Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. company Fita Fortinet dedicated to the FortiGate platform, which provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering, anti-spam and other security features. An HTML injection vulnerability exist...

Moderate: Red Hat Security Advisory: Red Hat JBoss Portal 6.1.0 security update

An update for the GateIn Portal component in Red Hat JBoss Portal 6.1.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

PT-2012-2972

Name of the Vulnerable Software and Affected Versions ubiquity-slideshow-ubuntu versions before 58.2 Description The issue allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed during...

CVE-2012-0956: Undefined Security Weakness

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...

CentOS Update for squirrelmail CESA-2012:0103 centos4

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Google Chrome Web Script Execution Vulnerabilities - Jun09

This host has Google Chrome installed and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromebofvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Google Chrome Browser Kernel Buffer Overflow Vulnerability - Jun09 Authors: Sharath S Copyright: Copyright ...

Opera Web Script Execution Vulnerabilities - June09 (Linux)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Linux Authors: Sharath S Copyright: Copyrigh...

Microsoft Internet Explorer Web Script Execution Vulnerabilities

This host has Internet Explorer installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmsiewebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Microsoft Internet Explorer Web Script Execution Vulnerabilities Authors: Sharath S Copyright:...

Opera Web Script Execution Vulnerabilities (Jun 2009) - Linux

Opera browser is prone to multiple web script execution vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...