2583 matches found
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
Server side request forgery (ssrf)
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...
CVE-2017-6776
A vulnerability in the web framework of Cisco Elastic Services Controller ESC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to insufficient validation of user-supplied input by the affecte...
Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability
The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...
imporlux.standvirtual.com XSS vulnerability
Vulnerable URL: https://imporlux.standvirtual.com/?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E%5Bcategoryid%5D=%5Border%5D=createdat%3Adesc%5Bstandid%5D=58664 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...
CVE-2017-6761
Cisco Finesse’s web-based management interface (versions 10.6(1) and 11.5(1)) is affected by a cross-site scripting (XSS) vulnerability due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could lure a user into clicking a crafted link, enabling execution of ...
CVE-2017-6765
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA 9.16.11 and 9.41.2 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device, aka WebVPN XSS...
relyfitness.com XSS vulnerability
Open Bug Bounty ID: OBB-268582 Description| Value ---|--- Affected Website:| relyfitness.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
varsgedruk.co.za XSS vulnerability
Vulnerable URL: https://www.varsgedruk.co.za/getmodule.php?id=listitems.php=details=9780795801303 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10152695 VIP website status:| No...
downloads.sms.cam.ac.uk XSS vulnerability
Vulnerable URL: https://downloads.sms.cam.ac.uk/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
threadworx.com XSS vulnerability
Vulnerable URL: http://www.threadworx.com/product.php?pgnum=3=1%22--!%3E%3CSvg/OnLoad=alertOPENBUGBOUNTY%3E%22=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4243894 VIP website...
Design/Logic Flaw
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...
Design/Logic Flaw
Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack...
rattler-firebird.org XSS vulnerability
Vulnerable URL: http://www.rattler-firebird.org/vietnam/aircraft/aircraft.php?tailnumber=1"...
Cross site scripting
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2...
Cross site scripting
A vulnerability in the web application interface of the Cisco Identity Services Engine ISE portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known...
Cross site scripting
A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.51...