7638 matches found
Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04904)
Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in Revive Adserver. A remote attacker can exploit this vulnerabili...
Unspecified Cross-Site Scripting Vulnerability in Trend Micro ServerProtect for Linux
Trend Micro ServerProtect for Linux is an enterprise-grade anti-virus program that runs on Linux. An unspecified cross-site scripting vulnerability exists in Trend Micro ServerProtect for Linux, which is caused by a failure to validate user-submitted data. The vulnerability can be exploited to...
CVE-2017-7248
A Cross-Site Scripting XSS was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data type passed to the 'Gazelle-master/sections/better/transcode.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...
Cross-site Scripting (XSS)
Glassfish is vulnerable to cross-site scripting XSS attacks. A malicious user can execute arbitrary script via the REST interface...
MantisBT < 2.1.1 'view_type' XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
Kunena Forum Extension 'message subject' Cross Site Scripting Vulnerability
the Kunena Forum Extension for Joomla is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ganglia Web < 3.5.6 Multiple XSS Vulnerabilities
Ganglia Web is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ganglia Web < 3.5.8 XSS Vulnerability
Ganglia Web is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cisco Unified Computing System Director Cross-Site Scripting Vulnerability
Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...
Moodle 3.2.x < 3.2.2 Multiple Vulnerabilities
Binary data 700011.prm...
F-Secure Anti-Virus Remote Code Execution Vulnerability
F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...
Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities
A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...
Cross site scripting
Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03506)
MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.fplinks.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03615)
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...
MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03614)
MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. MaNGOSWebV4 suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03505)
MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.donate.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03507)
MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.shop.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
OneThird CMS vulnerable to cross-site scripting
Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...
