CVE-2018-1000528: Improper Neutralization of Input During Web Page Generation

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...

CVE-2018-0602: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Email Subscribers & Newsletters versions prior to 3.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors...

CVE-2018-0570: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0527: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8932

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 4.1.0.1 an...

PT-2018-8917

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.0 through 5.4.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Cybozu Mailwise versions 5.0.0 through 5.4.1,...

PT-2018-8923

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially affecting the security of the system. Recommendations For...

PT-2018-8961

Name of the Vulnerable Software and Affected Versions Site Reviews versions prior to 2.15.3 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 2.15.3, update to version 2.15.3 or...

PT-2018-8963

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information abou...

CVE-2018-0574: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

phpMyAdmin Cross-Site Scripting Vulnerability (PMASA-2018-3) - Linux

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2018-8970

Name of the Vulnerable Software and Affected Versions 5000 trillion yen converter version 1.0.6 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For version 1.0.6, update to a newer version that contains a fix for this issue...

CVE-2018-0565: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8960

Name of the Vulnerable Software and Affected Versions Email Subscribers & Newsletters versions prior to 3.5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting. Recommendations For versions prior to...

CVE-2018-0605: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

BloodBank v1.0 Cross-Site Scripting Vulnerability

BloodBank is a responsive blood bank and donor content management system CMS. BloodBank v1.0 suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-12588

Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...

CVE-2018-12588

The CVE concerns a cross-site scripting (XSS) vulnerability in PKP Open Monograph Press (OMP) templates/frontend/pages/searchResults.tpl. Affected versions are PKP OMP 1.2.0 through 3.1.1-2 (before 3.1.1-3). The issue allows remote attackers to inject arbitrary script/HTML via the catalog.noTitle...