5352 matches found
Cross-site Scripting (XSS)
Westwind.Utilities is vulnerable to cross-site scripting XSS. The vulnerability exists due to lack of validation when the single quote character ' is escaped as such ', allowing a remote attacker to inject arbitrary Javascript into a victim's browser...
Cross-Site Request Forgery (CSRF)
wordpress is vulnerable to cross-site request forgery CSRF. The vulnerability exists as it does not have any CSRF protections in place to prevent forged request when posting comments. Moreover, a lack of comment content filtering when an administrative user posts a comment, allows a remote attack...
CVE-2018-1829: Improper Neutralization of Input During Web Page Generation
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
PT-2019-9848
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation versions 5.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
PT-2019-9745
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation versions 5.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
Cross-Site Scripting (XSS)
contao/core-bundle is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the system logs, which would be executed in the context of the user's browser when the user loads the logs...
Cross-Site Scripting (XSS)
contao/core is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the email parameter in the Newsletter module...
Cross site scripting
Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with...
PT-2019-16707
Name of the Vulnerable Software and Affected Versions Pivotal Operations Manager versions 2.1.x prior to 2.1.20 Pivotal Operations Manager versions 2.2.x prior to 2.2.16 Pivotal Operations Manager versions 2.3.x prior to 2.3.10 Pivotal Operations Manager versions 2.4.x prior to 2.4.3 Description...
Apache Airflow vulnerable to Stored XSS
In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views...
Cross-Site Scripting (XSS)
github.com/grafana/grafana is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript through the content, url and name parameters under the Dashboard settings. This CVE ID is different from CVE-2018-18624 and CVE-2018-18625...
Pelco cameras Web Interface XSS
The vulnerability of the web interfaces of Pelco Sarix Enhanced and Spectra Enhanced microprogramming systems lies in the insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser...
Cross-Site Scripting (XSS)
bolt/bolt is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the title and slug parameters in a POST request to /bolt/editcontent/pages...
PT-2019-16847 · Ibm · Ibm Sterling B2B Integrator
Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2019-16845 · Ibm · Ibm Sterling B2B Integrator
Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2019-1691
Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings due to insufficient protection of the web page structure. This ca...
PT-2019-1689
Name of the Vulnerable Software and Affected Versions Expedition Migration tool versions 1.1.8 and earlier Description The issue arises from inadequate protection of the web page structure, allowing a remote attacker to exploit the vulnerability and execute arbitrary JavaScript or HTML code. This...
Cross site scripting
Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum...
