Lucene search
+L

7645 matches found

NVD
NVD
added 2020/10/21 7:15 p.m.24 views

CVE-2020-3515

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

6.1CVSS0.00774EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/21 7:15 p.m.23 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.3CVSS5.9AI score0.00774EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/10/21 7:15 p.m.14 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interfac...

4.3CVSS5.9AI score0.00833EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/10/21 7:15 p.m.27 views

Cross site scripting

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

2.6CVSS6AI score0.01159EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/10/21 7:15 p.m.25 views

Cross site scripting

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

2.6CVSS6AI score0.85576EPSS
SaveExploits2References1Affected Software2
Prion
Prion
added 2020/10/21 7:15 p.m.31 views

Cross site scripting

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

4.3CVSS6AI score0.01062EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/10/21 6:37 p.m.36 views

CVE-2020-3599 Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interfac...

6.1CVSS6AI score0.00833EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/21 6:35 p.m.24 views

CVE-2020-3515 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS6AI score0.00774EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/10/21 6:35 p.m.14 views

CVE-2020-3515 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS6.1AI score0.00774EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/21 6:35 p.m.28 views

CVE-2020-3553 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

4.8CVSS6AI score0.00774EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/21 4:15 p.m.15 views

Cross site scripting

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

4.3CVSS6.6AI score0.00943EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
added 2020/10/21 4:0 p.m.35 views

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation o...

6.1CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/21 3:15 p.m.30 views

CVE-2020-5650

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

6.6AI score0.00943EPSS
SaveExploits0References2
CVE
CVE
added 2020/10/21 3:15 p.m.58 views

CVE-2020-5650

CVE-2020-5650 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Simple Download Monitor (versions ≤ 3.8.8). The issue allows remote attackers to inject arbitrary scripts via unspecified vectors, potentially affecting the logged-in user’s browser. Multiple connected sources con...

6.1CVSS6.3AI score0.00943EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/10/19 12:0 a.m.19 views

Cisco Emergency Responder Open Redirect XSS (cisco-sa-20200108-er-xss)

According to its self-reported version, the Cisco Emergency Responder CER is affected by a cross-site scripting vulnerability in the web-based management interface due to insufficient validation of user-supplied input. An authenticated, remote attacker could exploit this by persuading a user of t...

5.5CVSS5.9AI score0.00622EPSS
SaveExploits0References3
OSV
OSV
added 2020/10/14 7:15 p.m.6 views

CVE-2020-7318

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

4.3CVSS5.9AI score0.01024EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/09 12:0 a.m.31 views

Cisco Identity Services Engine XSS (cisco-sa-ise-xxs-mf5cbYx5)

A cross-site scripting XSS vulnerability exists in Cisco Identity Services Engine web-based management interface due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by convincing a user to click a specially crafted UR...

4.8CVSS6.4AI score0.00617EPSS
SaveExploits0References3
Prion
Prion
added 2020/10/08 5:15 a.m.21 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

3.5CVSS5.3AI score0.00626EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/08 4:20 a.m.40 views

CVE-2020-3589 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the...

4.8CVSS4.9AI score0.00617EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/08 4:20 a.m.32 views

CVE-2020-3536 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

6.4CVSS5.3AI score0.00626EPSS
SaveExploits0References1
Rows per page
Query Builder