2589 matches found
Cross site scripting
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...
CVE-2017-12221
Cisco Firepower Management Center is affected by CVE-2017-12221, a cross-site scripting (XSS) vulnerability in the web framework caused by insufficient validation of user-supplied input. An authenticated, remote attacker could exploit this in the web interface to execute arbitrary script code in ...
Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
Cross-site Scripting (XSS)
automattic/jetpack is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript through the modules/shortcodes/polldaddy.php file as it does not properly sanitize the uniqueid parameter...
Patch Released for Critical Apache Struts Bug
The Apache Software Foundation has patched a critical remote code execution vulnerability affecting all versions of the popular application development framework Struts since 2008. All web applications using the framework’s REST plugin are vulnerable. Users are advised to upgrade their Apache...
Server side request forgery (ssrf)
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
CVE-2017-6776
A vulnerability in the web framework of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient validation of user-supplied input by the affecte...
Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability
The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...
imporlux.standvirtual.com XSS vulnerability
Vulnerable URL: https://imporlux.standvirtual.com/?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E%5Bcategoryid%5D=%5Border%5D=createdat%3Adesc%5Bstandid%5D=58664 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...
CVE-2017-6765
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...
CVE-2017-6761
Cisco Finesse’s web-based management interface (versions 10.6(1) and 11.5(1)) is affected by a cross-site scripting (XSS) vulnerability due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling execution of ...
relyfitness.com XSS vulnerability
Open Bug Bounty ID: OBB-268582 Description| Value ---|--- Affected Website:| relyfitness.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
varsgedruk.co.za XSS vulnerability
Vulnerable URL: https://www.varsgedruk.co.za/getmodule.php?id=listitems.php=details=9780795801303 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10152695 VIP website status:| No...
downloads.sms.cam.ac.uk XSS vulnerability
Vulnerable URL: https://downloads.sms.cam.ac.uk/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
threadworx.com XSS vulnerability
Vulnerable URL: http://www.threadworx.com/product.php?pgnum=3=1%22--!%3E%3CSvg/OnLoad=alertOPENBUGBOUNTY%3E%22=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4243894 VIP website...
Design/Logic Flaw
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...