3542 matches found
DokuWiki - Cross-Site Scripting Detection
DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
WordPress e-search <=1.0 - Cross-Site Scripting Detection
Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
CVE-2026-15069: Improper Neutralization of Special Elements used in an OS Command
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page generation...
WS-2012-0023
XSS injection vulnerability was found in loofah before 0.4.6. Loofah Gem for Ruby contains a flaw that allows a remote cross-site scripting XSS attack. This flaw exists because the Loofah::HTML::Document\text function passes properly sanitized user-supplied input to the Loofah::XssFoliate and...
CVE-2026-40230
Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the body field of a knowledge base Doc.This issue affects helpy: 2.8.0...
CVE-2026-20059: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate...
CVE-2026-20089: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...
CVE-2025-10553: Improper Neutralization of Input During Web Page Generation
A Stored Cross-site Scripting XSS vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2026-2101: Improper Neutralization of Input During Web Page Generation
A Reflected Cross-site Scripting XSS vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-12956: Improper Neutralization of Input During Web Page Generation
A reflected Cross-site Scripting XSS vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-10552: Improper Neutralization of Input During Web Page Generation
A stored Cross-site Scripting XSS vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
EUVD-2017-3838
Malware in sbrugna...
EUVD-2017-15708
Malware in sbrugna...
EUVD-2019-10218
Malware in sbrugna...
EUVD-2017-15665
Malware in sbrugna...
EUVD-2019-10498
Malware in sbrugna...
EUVD-2017-3869
Malware in sbrugna...
EUVD-2021-11579
Malware in sbrugna...