Lucene search
K

3300 matches found

CNVD
CNVD
added 2021/07/19 12:0 a.m.21 views

Advantech R-SeeNet Cross-Site Scripting Vulnerability (CNVD-2021-57185)

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in the devicegraphpage.php script function of...

9.6CVSS3.6AI score0.099EPSS
Exploits1References1
OSV
OSV
added 2021/07/16 11:15 a.m.2 views

CVE-2021-21803

This vulnerability is present in devicegraphpage.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution...

6.1CVSS7AI score
Exploits0References1
NVD
NVD
added 2021/07/16 11:15 a.m.16 views

CVE-2021-21802

This vulnerability is present in devicegraphpage.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution...

9.6CVSS0.099EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2021/07/16 12:0 a.m.4 views

PT-2021-14785 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet affected versions not specified Description: The issue is present in the device graph page.php script, part of the Advantech R-SeeNet web applications. It allows arbitrary JavaScript code execution when a victim visits a...

9.6CVSS7.7AI score0.099EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/07/16 12:0 a.m.6 views

PT-2021-14784 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet affected versions not specified Description: The issue is present in the device graph page.php script, part of the Advantech R-SeeNet web applications. It allows arbitrary JavaScript code execution when a victim visits a...

9.6CVSS7.7AI score0.63415EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/07/15 12:0 a.m.5 views

Advantech R-SeeNet 跨站脚本漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in the devicegraphpage.php script function of...

9.6CVSS5.8AI score0.07902EPSS
Exploits1References3
Veracode
Veracode
added 2021/07/13 6:57 a.m.16 views

Cross-Site Scripting (XSS)

servicestack is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via a malicious URL to the application...

6.1CVSS4.6AI score0.00889EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/07/11 2:15 a.m.21 views

Cross site scripting

A reflected Cross Site Scripting XXS vulnerability in ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.3CVSS6.2AI score0.00744EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/11 12:0 a.m.4 views

Esri Arcgis Server 跨站脚本漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A reflected cross-site scripting vulnerability exists in...

6.1CVSS5.7AI score0.00744EPSS
Exploits0References3
Prion
Prion
added 2021/07/10 3:15 p.m.16 views

Cross site scripting

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.3CVSS4.9AI score0.00688EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/10 2:26 p.m.15 views

CVE-2021-29106 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.7CVSS6.1AI score0.00688EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/07/10 2:26 p.m.8 views

CVE-2021-29106 There is a reflected Cross Site Scripting (XSS) vulnerability in Esri ArcGIS Server version 10.8.1 and below.

A reflected Cross Site Scripting XSS vulnerability in Esri ArcGIS Server version 10.8.1 and below may allow a remote attacker able to convince a user to click on a crafted link which could potentially execute arbitrary JavaScript code in the user’s browser...

4.7CVSS6.1AI score0.00688EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/07/10 12:0 a.m.5 views

Esri Arcgis Server 跨站脚本漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A reflected cross-site scripting vulnerability exists in...

6.1CVSS5.7AI score0.00688EPSS
Exploits0References3
CNVD
CNVD
added 2021/07/07 12:0 a.m.10 views

Apache Jena Fuseki Cross-Site Scripting Vulnerability

Apache Jena Fuseki is a SPARQL server from the Apache Foundation USA. It can run as an operating system service, as a Java Web application WAR file, and as a standalone server. A cross-site scripting vulnerability exists in Apache Jena Fuseki versions 2.0.0 through 4.0.0, which can be exploited b...

6.1CVSS6.5AI score0.02881EPSS
Exploits0References1
NVD
NVD
added 2021/07/05 10:15 a.m.28 views

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.1CVSS0.02881EPSS
Exploits0References1
OSV
OSV
added 2021/07/05 10:15 a.m.5 views

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.1CVSS6.5AI score
Exploits0References1
Cvelist
Cvelist
added 2021/07/05 9:15 a.m.25 views

CVE-2021-33192 Display information UI XSS

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

6.7AI score0.02881EPSS
Exploits0References1
CNVD
CNVD
added 2021/07/05 12:0 a.m.12 views

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A cross-site scripting vulnerability exists in the login component of the web client for Zimbra Collaboration Suite. An attacker could exploit this vulnerability by adding executable...

6.1CVSS6.5AI score0.0327EPSS
Exploits0References1
Huntr
Huntr
added 2021/07/04 5:22 p.m.9 views

Cross-site Scripting (XSS) - Stored in bigprof-software/online-rental-property-manager

💥 BUG Stored xss 2 💥 VERSION TESTED latest version as of 4/7/21 💥 IMPACT xss allow to execute arbitary javascript in vicitm account 💥 STEP TO REPRODUCE 1. goto http://localhost/online-rental/app/admin/pageSettings.php and click on Sign Up tab .\ put bellow xss payload xss2"' in Members custom...

2.1AI score
Exploits0
Huntr
Huntr
added 2021/07/04 5:20 p.m.7 views

Cross-site Scripting (XSS) - Stored in bigprof-software/online-rental-property-manager

💥 BUG Stored xss via signup page 💥 VERSION TESTED latest version as of 4/7/21 💥 IMPACT xss allow to execute arbitary javascript in vicitm account 💥 STEP TO REPRODUCE 1. goto http://localhost/online-rental/app/admin/pageSettings.php and click on Sign Up tab . Here allow signup.\ now put bellow xss...

2.6AI score
Exploits0
Rows per page
Query Builder