PT-2022-1419

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote attacker to conduct cross-site...

PT-2022-1434

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Security Manager. These vulnerabilities are due to insufficient validation of...

PT-2022-1435

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web-based management interface, allowing for cross-site scripting attacks. An attacker could...

Cisco Security Manager 跨站脚本漏洞

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which can ...

PT-2022-1442

Name of the Vulnerable Software and Affected Versions Cisco Security Manager affected versions not specified Cisco Secure Network Analytics affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, whi...

Lemon OA 跨站脚本漏洞

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA version V1.10.0 has a security vulnerability that originates from the potrtalItemName parameter in webPortalController.java. An attacker can use the vulnerability to execute...

CVE-2021-20857

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20858

Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20856

Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20847

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A 38JP111G, 38JP111J, 38JP111K, 38JP111L, 38JP126F, 38JP126G, 38JP126J, 38JP203B, and 38JP203C allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device...

PT-2021-14298

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 1.02.9 and prior, update to a...

PT-2021-14301

Name of the Vulnerable Software and Affected Versions: ELECOM LAN router WRC-2533GHBK-I versions 1.20 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For ELECOM LAN router...

CVE-2021-20855: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

Liferay Portal 7.3.2 < 7.3.6 XSS

Liferay Portal 7.3.2 prior to 7.3.6 is affected by a cross-site scripting XSS vulnerability in its redirect module component due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Cross-site Scripting in github.com/schollz/rwtxt

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20840

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...