The vulnerability of the JetBrains YouTrack project management and task management software arises from the lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the JetBrains YouTrack project management and task management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of SonicWall SMA 100 network firewall microprogramming software, related to the lack of protection for website structure, allows attackers to execute arbitrary code.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-9378: Improper Neutralization of Input During Web Page Generation

The Vayu Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attributes in the Lottie block in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for...

Real-Estate-website-in-PHP 安全漏洞

Real-Estate-website-in-PHP is a free and open source real estate website by scriptandtools individual developers. A security vulnerability exists in Real-Estate-website-in-PHP version 1.0, which originates from an incorrect manipulation of the file /admin/userlist.php resulting in execution after...

CVE-2025-55473

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in the lack of measures taken to protect its web page structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-55473: Improper Neutralization of Input During Web Page Generation

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

Asian Arts Talents Foundation Website 安全漏洞

Asian Arts Talents Foundation Website is a website of Asian Arts Talents Foundation, Inc. A security vulnerability exists in Asian Arts Talents Foundation Website version v5.1.x, which stems from improper handling of the X-Forwarded-For header and could lead to cross-site scripting attacks...

CVE-2025-9773 RemoteClinic edit.php cross site scripting

A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the file /staff/edit.php. Executing manipulation of the argument Last Name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used...

The vulnerabilities in the software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allow attackers to carry out cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP BIC Document is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...

CVE-2025-20317

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An...

Linux Distros Unpatched Vulnerability : CVE-2021-1799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security...

The vulnerability of the IBM System Storage Virtualization Engine, a virtualization platform for data storage systems, relates to insufficient protection of the website structure. This allows attackers to execute arbitrary code and disclose sensitive information.

The vulnerability of the IBM System Storage Virtualization Engine virtualization platform relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

The vulnerability of the SolarWinds Observability Self-Hosted (SWOSH) software for network monitoring and IT infrastructure management lies in the lack of security measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the SolarWinds Observability Self-Hosted SWOSH software for network monitoring and IT infrastructure management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

CVE-2025-20317 Cisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An...

Linux Distros Unpatched Vulnerability : CVE-2017-13792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2017-13884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2021-44775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitra...

Linux Distros Unpatched Vulnerability : CVE-2018-20726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability exists in host.php via tree.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website...

CVE-2025-55301 The Scratch Channel Allows Username Modification

The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1...