CVE-2018-0565

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0559

CVE-2018-0559 concerns Cybozu Mailwise 5.0.0–5.4.1 with a reflected cross-site scripting flaw in the Address field (CWE-79). The vulnerability allows an attacker to inject scripts that may execute in the logged-in user’s browser; impact is described as arbitrary script execution on the user’s bro...

CVE-2018-0559

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0558

Cybozu Mailwise 5.0.0–5.4.1 contains a reflected cross-site scripting (CWE-79) vulnerability in System settings, enabling injection of arbitrary script or HTML and potential session-local impact. The issue is confirmed across multiple sources (CVE-2018-0558 and related records). Attack vectors ar...

CVE-2018-0527

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0565

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0574

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0602

Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0612

Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0612

The CVE-2018-0612 issue is a cross-site scripting vulnerability in the Chrome extension “5000 trillion yen converter” (v1.0.6). The root cause is a reflected/stored XSS vector in the extension that can cause arbitrary JavaScript to execute in a user’s browser, as documented in multiple sources (C...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0527

Cybozu Office is affected by CVE-2018-0527: a Cross-site scripting (CWE-79) vulnerability in Cybozu Office versions 10.0.0–10.7.0 that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The impact is an arbitrary script execution in the user’s browser. Reme...

CVE-2018-0557

CVE-2018-0557 affects Cybozu Mailwise versions 5.0.0–5.4.1. The vulnerability is a Stored cross-site scripting (CWE-79) in the E-mail Details Screen, allowing a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Impact is that an arbitrary script may be executed in th...

CVE-2018-0570

CVE-2018-0570 is an XSS vulnerability in baserCMS affecting baserCMS 4.1.0.1 and earlier and 3.0.15 and earlier. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details from multiple sources indicate that a site operator login...