29800 matches found
CVE-2018-0576: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2018-8941
Name of the Vulnerable Software and Affected Versions ASUS RT-AC1200HP Firmware versions prior to 3.0.0.4.380.4180 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.4.380.418...
PT-2018-8939
Name of the Vulnerable Software and Affected Versions ASUS RT-AC87U Firmware versions prior to 3.0.0.4.378.9383 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.4.378.9383,...
PT-2018-8940
Name of the Vulnerable Software and Affected Versions ASUS RT-AC68U versions prior to 3.0.0.4.380.1031 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.4.380.1031, update to...
PT-2018-8943
Name of the Vulnerable Software and Affected Versions Ultimate Member plugin versions prior to 2.0.4 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Ultimate Member plugin versions prior to 2.0.4, update to version 2.0.4...
CVE-2018-0581: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ASUS RT-AC87U Firmware version prior to 3.0.0.4.378.9383 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Open-AudIT Community 2.2.0 Cross Site Scripting
Exploit Title: Open-AudIT Community - 2.2.0 a Cross-Site Scripting Exploit Author: Tejesh Kolisetty Vendor Homepage: https://opmantek.com/ Software Link: https://opmantek.com/network-tools-download/ Affected Version: 2.2.0 Category: WebApps Tested on: Win7 Professional CVE : CVE-2018-10314 1...
Synology Note Station Cross-Site Scripting Vulnerability
Synology Note Station is a cloud-based note management platform from Synology. A cross-site scripting vulnerability exists in SYNO.NoteStation.Note in Synology Note Station versions prior to 2.5.1-0844. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with th...
CVE-2018-10803
Cross-site scripting XSS vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 build 123125 allows remote attackers to inject arbitrary web script or HTML via a crafted description value. This can be exploited through CSRF...
CVE-2018-10803
Cross-site scripting XSS vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 build 123125 allows remote attackers to inject arbitrary web script or HTML via a crafted description value. This can be exploited through CSRF...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...
CVE-2018-8910
Cross-site scripting XSS vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover - Audit Scripts - List Scripts - Download section...
CVE-2018-10314
Open-AudIT Community 2.2.0 contains a documented Cross-Site Scripting (XSS) vulnerability. An attacker can inject arbitrary web script or HTML by supplying a crafted name for a component, exploited via the action parameter in Discover → Audit Scripts → List Scripts → Download. The description con...
CVE-2018-10314
Cross-site scripting XSS vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover - Audit Scripts - List Scripts - Download section...
Cross site scripting
Cross-site scripting XSS vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via the commitmsg parameter...
CVE-2018-8911
Cross-site scripting XSS vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments...