F-Secure Anti-Virus Remote Code Execution Vulnerability

F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...

Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-17407

Name of the Vulnerable Software and Affected Versions Open.GL versions prior to 2017-03-13 Description The issue exists due to insufficient filtration of user-supplied data passed to the "Open.GL-master/index.php" URL. This allows an attacker to execute arbitrary HTML and script code in a browser...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03506)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.fplinks.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03505)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.donate.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03614)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. MaNGOSWebV4 suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03507)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.shop.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03615)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

CVE-2017-6541

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...

PT-2017-17138

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as url and pssid, passed to the "/webpagetest-master/www/weblite.php" API endpoint. This...

PT-2017-17107

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/RecordBrowser/grid.php" URL. An attacker could execute...

PT-2017-7480

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to specific pages, including 1 the media page, 2 the developer data edit page, or 3 the form page...

melbourne.com XSS vulnerability

Vulnerable URL:...

Google Chrome XSS

The vulnerability of the Blink component in Google Chrome allows for control over JavaScript during the execution of a method that initiates a custom script. Exploiting this vulnerability enables a malicious actor to inject any desired script or HTML code through a specially crafted HTML page...

JVN#73083905: Multiple vulnerabilities in WBCE CMS

WBCE CMS provided by WBCE Team is an open-source Contents Management System CMS. WBCE CMS contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2118 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

Joomla com_fabrik component cross-site scripting vulnerability

Joomla is an open source content management system CMS. A cross-site scripting vulnerability exists in the Joomla comfabrik component. An attacker can exploit this vulnerability to inject arbitrary web script and HTML...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title of an appointment or 2 contact fields...