Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

docteurmaxboukris.com XSS vulnerability

Vulnerable URL: http://docteurmaxboukris.com/recherche.php?recherche=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Atlassian Confluence Server 5.10.x < 5.10.6 XSS

Binary data 9942.prm...

carseatdesks.com XSS vulnerability

Vulnerable URL: http://www.carseatdesks.com/prod.php?node=1079"=autoexec-gripmaster-portable-car-seat-desk-with-universal-ipadtablet-mount-10004-with-free-ergonomics-ebook.WJmJ49HWDtQ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

pullmangallery.com XSS vulnerability

Vulnerable URL: http://pullmangallery.com/viewitem.php?cat=42"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3944288 VIP website status:| No Check pullmangallery.com SSL...

RHEL 5 : JBoss EAP (RHSA-2017:0246)

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Cross site scripting

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

CVE-2017-5393

The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could allow malicious extensions to install additional extensions from the CDN in combination with an XSS attack on Mozilla AMO sites. This vulnerability affects...

kazan.avtochip.ru XSS vulnerability

Vulnerable URL: http://kazan.avtochip.ru/?show=--%3E%22%3E%20%3C%22%20%3E%20%22%20%3C%20%22%20.,%20%22%20%3C%20%3E%20%22%20%3C/script%3E%3C/title%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

Security vulnerabilities fixed in Firefox 51 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potential...

XSS attack possible on FishEye file history page

The File History page was vulnerable to XSS...

mysparetruck.com.au XSS vulnerability

Vulnerable URL: http://www.mysparetruck.com.au/Search.php?w=%22%3E%3Cimg%20src=x%20onerror=prompt%28/openbugbounty/%29%3E===Model======Search Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability...

XSS on Delete Webhook

It was possible for users with JIRA administrator rights to perform an XSS attack through convincing another user, potentially a user with system administrators rights, to delete a specific webhook...

XSS on Delete Webhook

It was possible for users with JIRA administrator rights to perform an XSS attack through convincing another user, potentially a user with system administrators rights, to delete a specific webhook...

XSS on Delete Webhook

It was possible for users with JIRA administrator rights to perform an XSS attack through convincing another user, potentially a user with system administrators rights, to delete a specific webhook...

nc.in-links.eu XSS vulnerability

Vulnerable URL: http://nc.in-links.eu/?q=MERSEYSIDE'"--!...

XSS - Oracle E-Business Suite JTFFMPRINTSERVER

Application: Oracle E-Business Suite Versions Affected: Oracle E-Business Suite 12.2.3 Vendor: Oracle Bugs: XSS Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Authors: Ivan Chalykin ERPScan VULNERABILITY INFORMATION Class: XSS...

irkutsk.ru5.info XSS vulnerability

Vulnerable URL: http://irkutsk.ru5.info/search.php?txt=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

LocalTapiola: Reflected XSS and Open Redirect in several parameters (viestinta.lahitapiola.fi)

Basic report information Summary: Hi, The values within the ctx tag, are not filtered, they are reflected inside a javascript code in http://viestinta.lahitapiola.fi/webApp/APP3242, which can be exploited to perform an XSS Attack. The parameter are: ctxothersDrivingmagallupcount...