PT-2018-9015

Name of the Vulnerable Software and Affected Versions Denbun POP version V3.3P R4.0 and earlier Denbun IMAP version V3.3I R4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Denbun PO...

SugarCRM Cross-Site Scripting (CVE-2018-17784)

A cross-site scripting vulnerability exists in SugarCRM 6.5.26. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

CVE-2018-18478

LibreNMS before version 1.44 is vulnerable to a persistent XSS via the dashboard_name parameter in ajax_form.php, related to html/includes/forms/add-dashboard.inc.php, delete-dashboard.inc.php, and edit-dashboard.inc.php. An attacker could inject arbitrary web script/HTML that may be executed in ...

Cross site scripting

Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...

PT-2018-4382

Name of the Vulnerable Software and Affected Versions Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via various...

PT-2018-14480

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 1.44 Description The issue allows remote attackers to inject arbitrary web script or HTML via the dashboard name parameter in the "/ajax form.php" API endpoint, related to files such as...

GHSA-RF7Q-XQM3-6923 Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML

Cross-site scripting XSS vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies...

SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications. SAP NetWeaver Application Server AS for ABAP is an application server that runs in NetWeaver and is based on the ABAP Advanced Business Programmi...

CVE-2018-0059: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

PT-2018-8591

Name of the Vulnerable Software and Affected Versions: Juniper Networks ScreenOS versions prior to 6.3.0r26 Description: A persistent cross-site scripting issue in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML, potentially stealing...

CVE-2018-17053

Cross-site scripting XSS vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to login request parameters, a different vulnerability than CVE-2018-17054...

CVE-2018-17021

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-0652

GROWI is affected: CVE-2018-0652 is a Stored XSS in the UserGroup Management section of admin page, impacting GROWI v3.1.11 and earlier. The underlying issue allows remote attackers with authentication to inject arbitrary scripts/HTML in the logged-in user’s browser. Documented impact includes ar...

Apache ActiveMQ Cross-Site Scripting Vulnerability (CNVD-2018-16203)

Apache ActiveMQ is an open source message broker that can be used as an intermediary to communicate data between other software. A cross-site scripting vulnerability exists in Apache ActiveMQ, which can be exploited by remote attackers to inject arbitrary web script or HTML...

XYCMS Cross-Site Scripting Vulnerability

XYCMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in the system/editbook.php file in XYCMS version 1.7. A remote attacker can exploit this vulnerability by sending a specially crafted request to adddo.php to inject arbitrary web script or HTM...

Cross site scripting

Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2018-15169

The CVE-2018-15169 entry concerns Zoho ManageEngine Applications Manager 13 before build 13820, where a reflected XSS vulnerability exists in the /deleteMO.do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts include the ability to perform scr...

NEC Platforms Calsos CSDX and CSDJ Series Products Cross-Site Scripting Vulnerability

NEC Platforms Calsos CSDX and CSDJ are both remote monitoring devices from NEC Platforms Japan. A cross-site scripting vulnerability exists in the NEC Platforms Calsos CSDX and CSDJ family of products, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0618

The provided documents confirm CVE-2018-0618 is a cross-site scripting vulnerability in Mailman prior to or including 2.1.26, caused by unvalidated input in the host_name field, enabling a malicious listowner to inject scripts on the listinfo page. Affected product: Mailman (versions up to 2.1.26...