PT-2017-15253

Name of the Vulnerable Software and Affected Versions iCodeChecker affected versions not specified Description A cross-site scripting issue in the Source code security studying tool allows an attacker to inject arbitrary web script or HTML. The exact vectors used for the injection are not...

CVE-2017-2224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2222: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2194: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10975

Lutim

CVE-2017-10970

CVE-2017-10970 is a documented XSS vulnerability in Cacti 1.1.12 where remote anonymous users could inject script via the id parameter in link.php, related to lib/html_validate.php's die_html_input_error. Connected advisories confirm the issue affects Cacti 1.1.12 and indicate remediation by upgr...

TOPdesk Reflective Cross-Site Scripting Vulnerability

TOPdesk is a terminal management system from the Dutch company TOPdesk. The system enables the management and maintenance of desktop systems through behavioral monitoring, system monitoring and security status detection. A reflective cross-site scripting vulnerability exists in TOPdesk. A remote...

CVE-2017-10795

Cross-site scripting XSS vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the 1 file name or 2 collection name of videos...

PT-2017-7549

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions 6.0 through 6.0-2637 Synology Photo Station versions 6.3 through 6.3-2961 Description The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the album name, file name of...

PT-2017-7550

Name of the Vulnerable Software and Affected Versions Synology Note Station versions 1.1-0212 and earlier Description The issue allows remote authenticated attackers to inject arbitrary web script or HTML. This can be achieved via the note title or file name of attachments. Recommendations For...

Trihedral VTScada Cross-Site Scripting Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A cross-site scripting vulnerability exists in Trihedral VTScada versions prior to 11.2.26. A remote attacker could exploit this vulnerability to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data...

CVE-2017-9624

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data...

CVE-2017-9622

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

Cross site scripting

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7810

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2017-13599)

Craft CMS is a content management system CMS. Craft CMS suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...