29800 matches found
CVE-2017-17719
A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...
CVE-2013-6465
Multiple cross-site scripting XSS vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs...
CVE-2013-6465
Multiple cross-site scripting XSS vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs...
CVE-2013-6465
CVE-2013-6465 : Multiple cross-site scripting (XSS) vulnerabilities exist in JBPM KIE Workbench 6.0.x. The issues allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name inputs. Sources in connected documents (NVD/CNVD/PRION/CVE entries) consistent...
CYBERNET SYSTEMS Maplesoft Maple Cross-Site Scripting Vulnerability
CYBERNET SYSTEMS Maplesoft Maple T.A. is a general-purpose software tool for mathematics, data analysis, visualization, and programming from CYBERNET SYSTEMS, Japan. A cross-site scripting vulnerability exists in the password recovery page in CYBERNET SYSTEMS Maplesoft Maple T.A. version 2016.0.6...
Cross site scripting
Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2017-16950
Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2017-16950
Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
CVE-2017-16950
CVE-2017-16950 is an XSS in UrBackup Server prior to 2.1.20. The web UI fails to properly sanitize the action parameter, allowing a remote attacker to inject arbitrary web script or HTML via that parameter. Affected product: UrBackup Server (before 2.1.20); root cause: insufficient input sanitiza...
CVE-2017-16950: Improper Neutralization of Input During Web Page Generation
Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter...
CVE-2017-15890
Cross-site scripting XSS vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter...
CVE-2015-6502
The CVE-2015-6502 entries describe a cross-site scripting (XSS) vulnerability in Puppet Enterprise’s console, affecting versions before 2015.2.1. The vulnerability arises from the string parameter (related to Login Redirect) and allows remote injection of web script/HTML. The connected sources co...
Cross site scripting
Cross-site scripting XSS vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the w...
CVE-2017-16789
CVE-2017-16789 affects Integration Matters nJAMS 3 prior to 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor up to version 3.0.1.3 and other products. It is a cross-site scripting (XSS) vulnerability that lets remote authenticated administrators inject arbitrary web script or HTML v...
CVE-2017-16789
Cross-site scripting XSS vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the w...
Cross site scripting
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-11590
Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
Cross-site Scripting (XSS)
drupal/core is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the strings in the exception backtrace, allowing a malicious user to inject and execute arbitrary web script through an exception...