CVE-2018-5233

Grav CMS

CVE-2018-7405

Cross-site scripting XSS in Zoho ManageEngine EventLog Analyzer before 11.12 Build 11120 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-7405

Zoho ManageEngine EventLog Analyzer is affected by CVE-2018-7405: a cross-site scripting (XSS) vulnerability in versions before 11.12 Build 11120. The root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact is described as enab...

Cross-Site Scripting Vulnerability in YZMCMS

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A cross-site scripting vulnerability exists in YzmCMS. Remote attackers can use this vulnerability to inject arbitrary Web script or...

CVE-2018-6811

Multiple cross-site scripting XSS vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface...

Cross site scripting

Cross-site scripting XSS vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785...

Cross site scripting

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...

CVE-2018-7197

An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting XSS vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL...

CVE-2018-5306

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to 1 admin/auditTrail.jsf, 2 mapolicymgmt/targetsMonitorView.jsf, 3...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 redir or 2 mkey parameter to waf/pcreexpression/validate...

CVE-2018-5306

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename in...

Kaspersky Secure Mail Gateway Cross-Site Scripting Vulnerability

Kaspersky Secure Mail Gateway is an email security solution from Russia's Kaspersky Lab. The program is able to automatically filter spam, phishing sites and various malicious attachments. A cross-site scripting vulnerability exists in Kaspersky Secure Mail Gateway version 1.1. A remote attacker...

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, Inc. that includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor ZCS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HT...

Cross site scripting

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0511

CVE-2018-0511 affects the WordPress WP Retina 2x plugin. The vulnerability is a cross-site scripting flaw in WP Retina 2x versions prior to 5.2.2, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors; impact can manifest as script execution in a logged-in user’s bro...

Pulse Connect Secure and Pulse Policy Secure Cross-Site Scripting Vulnerabilities

Pulse Connect Secure PCS and Pulse Policy Secure PPS are both products of Pulse Secure, Inc. of the U.S. Pulse Connect Secure is an SSL VPN solution. Pulse Policy Secure is a NAC and BYOD Pulse Connect Secure is an SSL VPN solution. A cross-site scripting vulnerability exists in the custompage.cg...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM...