29800 matches found
CVE-2017-3967
CVE-2017-3967 affects McAfee Network Security Management (NSM) web interface prior to version 8.2.7.42.2. The issue is a framing vulnerability that allows a remote attacker to inject arbitrary web script or HTML by breaking out of third‑party frames in application pages. Documents consistently de...
CVE-2017-3967 SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability
Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...
CVE-2017-3967: Improper Control of Generation of Code
Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...
PT-2018-7317
Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management NSM versions prior to 8.2.7.42.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via application pages due to the inability to break out of 3rd party HTML frames in the...
PT-2018-16422
Name of the Vulnerable Software and Affected Versions Safari versions prior to 11.1 Description The issue involves the WebKit component and allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is a cross-site scripting XSS vulnerability. Recommendations For...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-9173
Cross-site scripting XSS vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter...
CVE-2018-7203
Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...
Cross site scripting
Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...
CVE-2018-7203
CVE-2018-7203 affects Twonky Server 7.0.11–8.5, with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/set_all. The vulnerability is described in the NVD entry for CVE-2018-7203 and is corroborated by OpenVA...
Cross site scripting
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Gespage software, version 7.5.7, is affected by a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp. The available sources describe the vulnerability but d...
CVE-2018-9147
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
Cross site scripting
Cross-site scripting XSS vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter...
CVE-2014-6604
Cross-site scripting XSS vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter...
Zimbra < 8.7.11 Patch 1 XSS Vulnerability
Zimbra is prone to a cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2018-07903)
Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the /scp/index.php file in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'sor...
Cross site scripting
Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...