2589 matches found
Jenkins < 2.73.3 / 2.89 Multiple Vulnerabilities
The version of Jenkins running on the remote web server is prior to 2.89 or is a version of Jenkins LTS prior to 2.73.3. It is, therefore, affected by multiple vulnerabilities : - Jenkins contains a flaw that allows traversing outside of a restricted path. The issue is due to the program not...
Cisco Registered Envelope Service Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are due to insufficient...
Cross site scripting
An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server port 80/tcp of the affected devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into clicking...
Dup Scout Enterprise 10.0.18 - Login Buffer Overflow Exploit
Exploit for windows platform in category remote exploits Tested on Windows 10 x86 The application requires to have the web server enabled. Exploit for older version: https://www.exploit-db.com/exploits/40832/ !/usr/bin/python import socket,os,time,struct,argparse parser = argparse.ArgumentParser...
jeterfuneralhome.com XSS vulnerability
Vulnerable URL: http://www.jeterfuneralhome.com/print.php?id=d3v2%22%3E%3CimG%2FsRc%3Dl+oNerrOr%3Dprompt/OPENBUGBOUNTY/+x%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1733949 VIP website status:| No...
report.az XSS vulnerability
Open Bug Bounty ID: OBB-397620 Description| Value ---|--- Affected Website:| report.az Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
medilab.com.mx XSS vulnerability
Open Bug Bounty ID: OBB-391536 Description| Value ---|--- Affected Website:| medilab.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
boardlife.co.kr XSS vulnerability
Vulnerable URL: http://boardlife.co.kr/?id=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 83240 VIP website status:| No Coordinated Disclosure Timeline: Description|...
Cross site scripting
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...
CVE-2017-12294
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...
auxiliadora.net XSS vulnerability
Open Bug Bounty ID: OBB-385660 Description| Value ---|--- Affected Website:| auxiliadora.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
[20180509] - Core - XSS vulnerability in the media manager
Inadequate filtering of file and folder names lead to various XSS attack vectors in the media manager...
Rails vulnerable to Cross-site Scripting
There is an XSS vulnerability in the numbertocurrency, numbertopercentage and numbertohuman helpers in Ruby on Rails. This vulnerability has been assigned the CVE identifier CVE-2014-0081. Versions Affected: All. Fixed Versions: 4.1.0.beta2, 4.0.3, 3.2.17. Impact ------ These helpers allows users...
urjaglobal.in XSS vulnerability
Vulnerable URL: http://www.urjaglobal.in/product.php?page=11=sch=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3310088 VIP website status:| No Coordinate...
kitchencabinetsanddesignsonline.com XSS vulnerability
Vulnerable URL: http://www.kitchencabinetsanddesignsonline.com/sitesearch.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:|...
Cross site scripting
A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...
Cross site scripting
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...
CVE-2017-12272
CVE-2017-12272 affects Cisco IOS XE Software Web Framework, where insufficient input validation in the web server enables unauthenticated, remote attackers to perform a cross-site scripting (XSS) attack. The exploit requires the victim to visit a malicious link or for an attacker to intercept a u...
CVE-2017-15571
CVE-2017-15571 affects Redmine prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. The vulnerability is a cross-site scripting (XSS) flaw in app/views/issues/_list.html.erb caused by crafted column data, enabling injection of HTML/script in affected deployments. Connected sources conf...