7605 matches found
CVE-2018-0549: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...
CVE-2018-9928
Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08049)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...
PT-2018-16422
Name of the Vulnerable Software and Affected Versions Safari versions prior to 11.1 Description The issue involves the WebKit component and allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is a cross-site scripting XSS vulnerability. Recommendations For...
CVE-2018-7203
Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...
Cross site scripting
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2018-07903)
Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the /scp/index.php file in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'sor...
PT-2018-4409
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM - Collaborative Edition versions 9.1 through 11.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple...
Cross site scripting
Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0537
CVE-2018-0537 describes a cross-site scripting (CWE-79) vulnerability in QQQ SYSTEMS ver2.24. The flaw resides in the quiz_op.cgi CGI script, allowing an attacker-controlled script or HTML to be injected and executed in a victim’s browser when visiting a page that uses the product. Reported impac...
CVE-2018-0538: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0536: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...
CVE-2018-0535: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0537: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quizop.cgi...
PT-2018-4417
Name of the Vulnerable Software and Affected Versions IBM Connections versions 3.0.1.1 and earlier IBM Connections version 4.0 IBM Connections version 4.5 IBM Connections versions 5.0 before CR4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or...
CVE-2015-7458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108354...
CVE-2015-7459: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108355...
CVE-2015-7460: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108356...