CVE-2020-3460 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...

CVE-2020-3460 Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does no...

Atlassian Confluence < 7.4.2 / 7.5.x < 7.5.2 XSS (CONFSERVER-60102)

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.2 or 7.5.x prior to 7.5.2. It is, therefore, affected by a cross-site scripting XSS vulnerability in user macro parameters. An authenticated, remote attacker can exploit...

Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting (cisco-sa-cucm-cuc-imp-xss-OWuSYAp)

According to its self-reported version, Cisco Unified Communications Manager IM & Presence Service is affected by a Cross-Site Scripting vulnerabilities. An remote attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful...

Cisco Unified Communications Manager Cross-Site Scripting (cisco-sa-cucm-cuc-imp-xss-OWuSYAp)

According to its self-reported version, Cisco Unified Communications Manager is affected by a Cross-Site Scripting vulnerabilities. An remote attacker could exploit this vulnerability by inserting malicious data into a specific data field in the web interface. A successful exploit could allow the...

CVE-2020-5613

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5613

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

Cross site scripting

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

Cross site scripting

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5613

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5613: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-5612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-11934: Exposure of Resource to Wrong Sphere

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

PT-2020-18583

Name of the Vulnerable Software and Affected Versions KonaWiki versions 2.2.0 and earlier Description A cross-site scripting issue allows remote attackers to execute an arbitrary script via a specially crafted URL. Recommendations For versions 2.2.0 and earlier, update to a version later than 2.2...

PT-2020-18584

Name of the Vulnerable Software and Affected Versions KonaWiki versions 3.1.0 and earlier Description A cross-site scripting issue allows remote attackers to execute an arbitrary script via a specially crafted URL. Recommendations For versions 3.1.0 and earlier, update to a version later than 3.1...

Gallery PhotoBlocks < 1.2.0 - Authenticated Cross-Site Scripting (XSS)

The vulnerability is due to insufficient validation of gallery name parameter and image caption parameter. A remote attacker any authenticated low privileged user can exploit this to execute arbitrary script code within the context of the application...