Multiple Cross-Site Scripting Vulnerabilities in Ericsson Active Library Explorer

Ericsson Active Library Explorer is server-based software that allows users to browse Ericsson document libraries and documents using a standard Web browser. Ericsson Active Library Explorer has multiple cross-site scripting vulnerabilities. Due to the program failing to adequately filter...

Google Chrome memory misreference vulnerability (CNVD-2018-17045)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in Blink in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

Google Chrome Stack Buffer Overflow Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack buffer overflow vulnerability exists in Skia in Google Chrome. An attacker can exploit to execute arbitrary code in the browser context...

Google Chrome heap buffer overflow vulnerability (CNVD-2018-17041)

Google Chrome is a web browser developed by the American company Google Google. A heap buffer overflow vulnerability exists in WebGL in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

Galaxy CMS Cross-Site Scripting Vulnerability

Galaxy CMS is a lightweight, fast-response request content management system based on the .NET Framework and a SQL Server database. A cross-site scripting vulnerability exists in Galaxy CMS, which could be exploited by an attacker to execute arbitrary script code in the browser of a user in the...

EMS Master Calendar < 8.0.0.20180520 - Cross-Site Scripting

Exploit Title: EMS Master Calendar alert'XSS'xyz...

Multiple Vulnerabilities in Jenkins Global Build Stats Plugin

Jenkins is an open source automation server.Jenkins provides a number of plug-ins that support building, deploying and automating projects.Global Build Stats is one of the plug-ins that allows to collect and display global build results statistics. The Jenkins Global Build Stats plugin has multip...

chromium-browser cross-site scripting vulnerability

chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A cross-site scripting vulnerability exists in chromium-browser. An attacker can exploit the vulnerability to execute arbitrary code in the context of the...

X (Formerly Twitter): Blind XSS in Mobpub Marketplace Admin Production | Sentry via demand.mopub.com (User-Agent)

Summary: I've identified a Blind XSS vulnerability that fires in the Mobpub Marketplace Admin Production | Sentry dashboard and can be triggered by sending a HTTPS request to an endpoint from the domain demand.mopub.com. Description: I've sent the following HTTPS request to the following URL...

SAP Enterprise Portal Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a set of enterprise portal based on NetWeaver system platform developed by SAP, which contains content management, single sign-on, knowledge management, collaborative work, full-text search and other modules. A cross-site scripting vulnerability exists in SAP Enterprise...

PT-2017-15672

Name of the Vulnerable Software and Affected Versions FortiMail versions 5.0.0 through 5.2.9 FortiMail versions 5.3.0 through 5.3.8 Description The issue allows an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in to FortiMail, assuming the victim ...

Cross site scripting

A Cross-Site Scripting XSS was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data token passed to the 'wallacepos-master/myaccount/resetpassword.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the...

Cross site scripting

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-7205

A Cross-Site Scripting XSS was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data a passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

Authorization

An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-6905

An issue was discovered in concrete5 = 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data disablechoose passed to the "concrete5-legacy-master/web/concrete/tools/files/searchdialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser ...

CVE-2017-6537

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data bgcolor passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context o...

CVE-2017-6537

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data bgcolor passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context o...

Cross site scripting

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data pssid passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...