Lucene search
K

3351 matches found

CNVD
CNVD
added 2017/03/16 12:0 a.m.3 views

F-Secure Anti-Virus Remote Code Execution Vulnerability

F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...

9.3CVSS8.4AI score0.00749EPSS
Exploits0References1
Cisco
Cisco
added 2017/03/15 4:0 p.m.24 views

Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

6.1CVSS6.1AI score0.00293EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/02/16 12:0 a.m.19 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm2)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

6.1CVSS6.1AI score0.0032EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/02/16 12:0 a.m.22 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

6.1CVSS6.1AI score0.0032EPSS
Exploits0References1
Cisco
Cisco
added 2017/02/15 4:0 p.m.48 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

6.1CVSS6.1AI score0.0032EPSS
Exploits0References1
Cisco
Cisco
added 2017/02/15 4:0 p.m.25 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

6.1CVSS6.1AI score0.0032EPSS
Exploits0References1
Cisco
Cisco
added 2017/02/15 4:0 p.m.26 views

Cisco Firepower Management Center Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. The vulnerability occurs because the affected software fails to perform sufficient validation a...

4.8CVSS5.3AI score0.00187EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/02/08 12:0 a.m.13 views

Atlassian Confluence Server 5.10.x < 5.10.6 XSS

Binary data 9942.prm...

6.1CVSS7.3AI score0.04154EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2016/12/22 12:0 a.m.15 views

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (cisco-sa-20161207-pca)

Cisco Prime Collaboration Assurance is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.2AI score0.0031EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/12/20 12:0 a.m.46 views

Adobe RoboHelp Unspecified XSS (APSB16-46)

The version of Adobe RoboHelp installed on the remote Windows host is affected by an unspecified cross-site scripting XSS vulnerability due to improper validation of input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execu...

6.1CVSS6.4AI score0.00924EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2016/12/08 12:0 a.m.19 views

SPIP 3.1.3 'rac' Parameter XSS Vulnerability

SPIP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:spip:spip"; if...

6.1CVSS5.9AI score0.00252EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/11/26 12:0 a.m.22 views

Cisco Meeting Server Cross-Site Scripting Vulnerability (cisco-sa-20160714-ms)

Cisco Meeting Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.1AI score0.0025EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2016/10/28 12:0 a.m.26 views

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of some parameters passed to the web...

6.1CVSS6.6AI score0.0027EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/10/28 12:0 a.m.21 views

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Som...

6.1CVSS6.3AI score0.00489EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/10/21 12:0 a.m.37 views

Google Chrome Security Updates (stable-channel-update-for-desktop-2016-10) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

10CVSS6.8AI score0.00858EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/09/15 12:0 a.m.22 views

PRTG Network Monitor XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.4AI score0.0024EPSS
Exploits0References1
Symantec
Symantec
added 2016/09/13 12:0 a.m.31 views

Microsoft Exchange Server CVE-2016-3379 Cross Site Scripting Vulnerability

Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow...

4.3CVSS0.2AI score0.07631EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/09/09 12:0 a.m.8 views

BigTree-CMS 4.1.x < 4.1.9 XSS

Binary data 9553.prm...

7.3AI score
Exploits0References2
OpenVAS
OpenVAS
added 2016/09/08 12:0 a.m.23 views

Cisco Firepower Management Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. SPDX-FileCopyrightText: 2016 Greenbone ...

5.4CVSS5.3AI score0.00222EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/09/08 12:0 a.m.14 views

ClipBucket Unspecified Cross Site Scripting Vulnerability

ClipBucket is prone to an unspecified cross site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.2AI score0.00471EPSS
Exploits0References2
Rows per page
Query Builder