CVE-2017-12320

Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service a cloud-based service could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are du...

CVE-2017-12322

The CVE-2017-12322 issue concerns Cisco Registered Envelope Service (cloud-based web interface). Multiple vulnerabilities allow unauthenticated, remote attackers to perform cross-site scripting (XSS) or redirect users to malicious pages due to insufficient validation of user-supplied input. An at...

CVE-2017-12291

Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service a cloud-based service could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack or redirect a user of the affected service to an undesired web page. The vulnerabilities are du...

Adobe Connect Multiple Vulnerabilities (APSB17-35)

Adobe Connect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:connect"; ifdescription...

WordPress AMP Toolbox 1.9.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable AMP Toolbox Plugin 1.9.4 AMP Toolbox Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Cacti cross-site scripting vulnerability (CNVD-2017-36486)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in Cacti version 1.1.27...

WordPress Secure HTML5 Video Player 3.14 Cross Site Scripting Vulnerability

WordPress Secure HTML5 Video Player plugin version 3.14 suffers from a cross site scripting vulnerability. Vulnerable Secure HTML5 Video Player Plugin 3.14 Secure HTML5 Video Player Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize...

Apache Wicket Cross-Site Scripting Vulnerability (CNVD-2017-34180)

Apache Wicket is the United States Apache Apache Software Foundation , a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . A cross-site scripting vulnerability exists in Apache Wicket. A remote...

PT-2017-17916

Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 5.1 and earlier, 5.2.0 through 5.2.9, 5.3.0 through 5.3.9 Description A reflected Cross-Site Scripting XSS issue allows an attacker to inject arbitrary web script or HTML via crafted HTTP requests on the customized...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, 3 userid, 4 username, 5 countryname, 6 browser, 7 operatingsystem, or 8 ipaddress parameter to...

Mistune Cross-Site Scripting Vulnerability

Mistune is a Python based parser with renderer functionality. A cross-site scripting vulnerability exists in the mistune.py file in Mistune version 0.7.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PHP Melody Cross-Site Scripting Vulnerability

PHP Melody is a self-hosted video CMS. A cross-site scripting vulnerability exists in PHP Melody versions prior to 2.7.3, which can be exploited by remote attackers to inject arbitrary web script or HTML...

Cisco IOS XE Software Cross-Site Scripting Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices.Web framework is one of the Web frameworks. A cross-site scripting vulnerability exists in the Web framework of Cisco IOS XE Software. A remote attacker can exploit this vulnerability to inject arbitrary web...

Cross site scripting

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

CVE-2017-12288

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

CVE-2017-12296

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

Cross site scripting

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

PT-2017-12462

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user ...

PT-2017-12471

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description A cross-site scripting XSS issue exists due to insufficient input validation of parameters passed to the web server. An attacker could exploit this by convincing a user to...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-10) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...