Lucene search
+L

7641 matches found

Tenable Nessus
Tenable Nessus
added 2021/05/07 12:0 a.m.28 views

Cisco Firepower Management Center Software Multiple XSS (cisco-sa-fmc-xss-yT8LNSeA)

The version of Cisco Firepower Management Center FMC installed on the remote host is affected by multiple cross-site scripting XSS vulnerabilities due to insufficient validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincin...

4.8CVSS5.4AI score0.00616EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2021/05/06 6:54 p.m.75 views

Reflected cross-site scripting in francoisjacquet/rosariosis

Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...

6.1CVSS5.6AI score0.0143EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2021/05/06 1:15 p.m.35 views

CVE-2021-1507

A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied...

6.4CVSS0.00635EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/06 1:15 p.m.30 views

CVE-2021-1490

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to improper...

6.1CVSS0.00704EPSS
SaveExploits0References1
Prion
Prion
added 2021/05/06 1:15 p.m.42 views

Cross site scripting

A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied...

3.5CVSS5.3AI score0.00635EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 12:41 p.m.33 views

CVE-2021-1490 Cisco Web Security Appliance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to improper...

4.7CVSS6.2AI score0.00704EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/29 6:15 p.m.30 views

CVE-2021-1456

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00616EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/29 6:15 p.m.33 views

CVE-2021-1457

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00616EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/29 6:15 p.m.25 views

CVE-2021-1455

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00616EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/29 6:15 p.m.25 views

CVE-2021-1458

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS0.00616EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/29 6:15 p.m.28 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

3.5CVSS5AI score0.00616EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/04/29 6:15 p.m.22 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

3.5CVSS5AI score0.00616EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/04/29 6:15 p.m.28 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

3.5CVSS5AI score0.00616EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/29 5:30 p.m.35 views

CVE-2021-1457 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS5.3AI score0.00616EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/04/29 5:30 p.m.12 views

CVE-2021-1457 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS6.1AI score0.00616EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/29 12:0 a.m.9 views

Cisco Firepower Management Center 跨站脚本漏洞

Cisco Firepower Management Center FMC is the next generation firewall management center software from Cisco. Cisco Firepower Management Center: 6.4.0.11 A cross-site scripting vulnerability exists that stems from a lack of sufficient cleanup of user-supplied data in the web-based management...

4.8CVSS5.4AI score0.00616EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/26 1:15 a.m.7 views

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

6.1CVSS5.9AI score0.00796EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/04/26 1:15 a.m.4 views

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

6.1CVSS7.1AI score0.00796EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/04/26 12:20 a.m.27 views

CVE-2021-20710

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

6.8AI score0.00773EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/04/26 12:20 a.m.39 views

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

6.3AI score0.00796EPSS
SaveExploits0References2
Rows per page
Query Builder