Knowage Cross-Site Scripting Vulnerability (CNVD-2018-11813)

Knowage formerly SpagoBI is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage version 6.1.1. A remote attacker can exploit the vulnerability by sending the name or description...

Cross site scripting

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

CVE-2018-11027: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

wityCMS 0.6.1 - Cross-Site Scripting

Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Date: 05/28/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link: https://github.com/Creatiwity/wityCMS/releases/tag/0.6.1 Version: 0.6.1 Tested on:...

Design/Logic Flaw

DISPUTED An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block...

Open Whisper Signal Cross-Site Scripting Vulnerability

Open Whisper Signal aka Signal-Desktop is a live chat application with encryption. A cross-site scripting vulnerability exists in the js/views/messageview.js file in Open Whisper Signal versions prior to 1.10.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HT...

Micro Focus NetIQ Identity Reporting Cross-Site Scripting Vulnerability

Micro Focus NetIQ Identity Reporting is a suite of identity reporting modules for use in NetIQ Identity Manager from Micro Focus UK. A security vulnerability exists in versions prior to Micro Focus NetIQ Identity Reporting 5.5 Service Pack 1. An attacker could exploit the vulnerability to inject...

CVE-2018-0583: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in ASUS RT-AC1200HP Firmware version prior to 3.0.0.4.380.4180 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8941

Name of the Vulnerable Software and Affected Versions ASUS RT-AC1200HP Firmware versions prior to 3.0.0.4.380.4180 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.4.380.418...

PT-2018-8939

Name of the Vulnerable Software and Affected Versions ASUS RT-AC87U Firmware versions prior to 3.0.0.4.378.9383 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.4.378.9383,...

PT-2018-8943

Name of the Vulnerable Software and Affected Versions Ultimate Member plugin versions prior to 2.0.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Ultimate Member plugin versions prior to 2.0.4, update to version 2.0.4...

Synology Note Station Cross-Site Scripting Vulnerability

Synology Note Station is a cloud-based note management platform from Synology. A cross-site scripting vulnerability exists in SYNO.NoteStation.Note in Synology Note Station versions prior to 2.5.1-0844. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with th...

Cross site scripting

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version...

CVE-2018-10164

Stored Cross-site scripting XSS vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4Windows/2.6.0Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version...

CVE-2017-14740: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...

Cross site scripting

Cross-site scripting XSS vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML...

PT-2018-5467

Name of the Vulnerable Software and Affected Versions: QNAP NAS application Photo Station versions prior to 5.4.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to unauthorized actions on the affected system...

PT-2018-18254

Name of the Vulnerable Software and Affected Versions: Caldera Forms plugin versions prior to 1.6.0-rc.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through various vectors, including a greeting message, the email transaction log, or...

Mautic cross-site scripting vulnerability (CNVD-2018-08601)

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in versions of Mautic prior to 2.13.0. A remote attacker can exploit this vulnerability to inject arbitrary...

CVE-2018-0551: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...