Cross site scripting

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

CVE-2019-1875 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

CVE-2019-1875 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

CVE-2019-1875

Cisco Prime Service Catalog’s web-based management interface is vulnerable to cross-site scripting (XSS) due to insufficient validation of user-supplied input. An authenticated, remote attacker can craft strings added to multiple configuration fields to execute arbitrary script code within the in...

Cisco Prime Service Catalog Input Validation Error Vulnerability

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for compute, network, storage, and other data center resources. An input validation error...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by...

Intelligent website management system has xss vulnerability

Intelligent website system is an intelligent website management system developed by Chongqing Xunmai Science and Technology Development Co. The Intelligent Website Management System has an xss vulnerability that can be exploited by attackers to inject arbitrary Web scripts or HTML...

Microsoft Office SharePoint CVE-2019-1031 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email ECE Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2019-9189

Summary of CVE-2019-9189 (FlexAir): Prima Systems FlexAir, versions 2.4.9api3 and earlier, allows uploading arbitrary Python scripts when configuring the main central controller. These scripts can be executed immediately with root privileges, enabling an authenticated attacker to gain full system...

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise Chat and Email ECE Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Bitdefender Safepay Remote Code Execution Vulnerability

Bitdefender SafePay is a secure browser. A remote code execution vulnerability exists in Bitdefender SafePay version 23.0.10.34. A remote attacker can exploit this vulnerability to execute arbitrary script code in the context of the current process or cause a denial of service...

Cross-site Scripting (XSS)

tomcat-catalina is vulnerable to cross-site scripting XSS. The vulnerability is possible because it outputs unsanitized user provided data for SSI printenv, allowing the attacker to inject arbitrary script through it...

Cross site scripting

A vulnerability in the NX API NX-API Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of...

XSS Vulnerability at JEESNS Groups

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS groups at the existence of an XSS vulnerability can be exploited by an attacker to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Articles

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS articles at the existence of XSS vulnerability , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

WellCMS X has an xss vulnerability

WellCMS X is a mobile-oriented content management product. An xss vulnerability exists in WellCMS X, which can be exploited to inject arbitrary web script or HTML...

Microsoft SharePoint Server CVE-2019-0963 Cross Site Scripting Vulnerability

Description Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Joomla! prior to 3.9.6 Cross-Site Scripting (XSS) Vulnerability

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.9.6. In versions prior to 3.9.6, a cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticate...

HumHub Cross-Site Scripting Vulnerability (CNVD-2019-13252)

Humhub is an open source PHP-based social networking system. A cross-site scripting vulnerability exists in HumHub version 1.3.12, which can be exploited by an attacker to inject arbitrary Web script or HTML...