CVE-2015-9105

Multiple cross-site scripting XSS vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the 1 file name or 2 collection name of videos...

PT-2017-8601

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Messages function of Cybozu Garoon Keitai. Recommendations For versions 3.0.0 through...

Cross site scripting

Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Nextcloud Server Cross-Site Scripting Vulnerability (CNVD-2017-07616)

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. A cross-site scripting vulnerability exists in several components of Nextcloud Server. A remote attacker can exploit th...

Zenario Cross-Site Scripting Vulnerability

Zenario is a web-based content management system and multilingual page software. A cross-site scripting vulnerability exists in Zenario version 7.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-8562

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.0.0 through 10.4.0 Description A cross-site scripting issue allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. Recommendations For Cybozu Office versions 9.0.0...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04904)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in Revive Adserver. A remote attacker can exploit this vulnerabili...

Ganglia Web < 3.5.8 XSS Vulnerability

Ganglia Web is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03505)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.donate.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2017-7480

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to specific pages, including 1 the media page, 2 the developer data edit page, or 3 the form page...

Joomla com_fabrik component cross-site scripting vulnerability

Joomla is an open source content management system CMS. A cross-site scripting vulnerability exists in the Joomla comfabrik component. An attacker can exploit this vulnerability to inject arbitrary web script and HTML...

EMC RSA Security Analytics Cross-Site Scripting Vulnerability

EMC RSA Security Analytics SA is a suite of security intelligence analytics platforms from EMC Corporation. The platform leverages and extends the architecture and analytics capabilities of RSA NetWitness. A cross-site scripting vulnerability exists in EMC RSA SA versions 10.5.3 and 10.6.2. A...

dotCMS cross-site scripting vulnerability (CNVD-2017-01336)

dotCMS is a content management system CMS from the US company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS version 3.7.0. An attacker can exploit this vulnerability to...

CVE-2016-9406

Cross-site scripting XSS vulnerability in the User control panel in MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Google Chrome Blink Cross-Site Scripting Vulnerability (CNVD-2016-12103)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A cross-site scripting vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit...

Google Chrome Blink Cross-Site Scripting Vulnerability (CNVD-2016-12101)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A cross-site scripting vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker can exploit...

PT-2016-3047

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 55.0.2883.75 Opera versions prior to 55.0.2883.75 Description The issue arises from incorrect handling of deferred page loads by the Blink component in Google Chrome and Opera, allowing a remote attacker to inje...

PT-2016-6733

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 6.0.2 before iFix004 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. Recommendations For IBM Rational DOORS Next Generation...