Centreon 2.6.x < 2.6.5 Multiple Vulnerabilities

According to its version number, the Centreon application hosted on the remote web server is version 2.6.x prior to 2.6.5. It is, therefore, affected by multiple vulnerabilities : - A cross-site request forgery XSRF vulnerability exists in the main.php script. A remote attacker can exploit this t...

R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities

R-Scripts Vacation Rental Script 7R - Multiple Vulnerabilities R-Scripts VRS 7R Multiple Stored XSS And CSRF Vulnerabilities Vendor: R-Scripts Product web page: http://www.r-scripts.com Affected version: 7R Summary: PHP Vacation Rental Script is the best solution for your vacation rentals online...

ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...

WordPress Pie Register Cross-Site Scripting Vulnerability

wordpress pie register plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla CMS 'login' Module XSS Vulnerability

Joomla is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

IBM Tivoli Federated Identity Manager Unspecified XSS

The version of IBM Tivoli Federated Identity Manager installed on the remote Windows host is affected by an unspecified cross-site scripting XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted URL, to arbitrary...

Centreon 2.6.1 Persistent Cross Site Scripting

Centreon 2.6.1 Stored Cross-Site Scripting Vulnerability Vendor: Centreon Product web page: https://www.centreon.com Affected version: 2.6.1 CES 3.2 Summary: Centreon is the choice of some of the world's largest companies and mission-critical organizations for real-time IT performance monitoring...

VideoLAN VLC Media Player Web Interface Cross-Site Scripting Vulnerability

This host has VideoLAN VLC Media Player and is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Novell GroupWise WebAccess Cross-Site Scripting (CVE-2014-0611)

A cross-site scripting vulnerability exists in Novell GroupWise WebAccess. The vulnerability is due to lack of input validation when handling email attachments. A remote, unauthenticated attacker can exploit this vulnerability by enticing a target user to view crafted web content. A successful...

Fortinet FortiMail Stored XSS Vulnerability (FG-IR-15-005)

Fortinet FortiMail is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiWeb Multiple Reflected XSS Vulnerabilities (FG-IR-15-005)

Fortinet FortiWeb is prone to multiple reflected cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Web Clients HTTP URL DOM Entity Cross-Site Scripting

A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...

Web Clients HTTP URL Escape Sequence Cross-Site Scripting

A cross-site scripting vulnerability has been reported in multiple web clients. The vulnerability is due to improper input validation. A remote attacker could exploit this vulnerability to execute arbitrary scripting or HTML code in the user's browser session...

WordPress < 3.7.6 / 3.8.6 / 3.9.4 / 4.1.2 Multiple Vulnerabilities

According to its version number, the WordPress application running on the remote web server is potentially affected by multiple vulnerabilities : - An unspecified flaw exists that allows an attacker to upload arbitrary files with invalid or unsafe names. Note that this only affects versions 4.1 a...

HP ArcSight ESM < 6.5c SP1 P1 / 6.8c Multiple Vulnerabilities

According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 6.5.1.1845.0 6.5c SP1 P1 or 6.8.0.1896 6.8c. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exist...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability

A vulnerability in filter search forms of certain admin webpages of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks. The vulnerability is due to insufficient input validation by an affected device. An unauthenticated...

Inductive Automation Ignition < 7.7.4 Multiple Vulnerabilities

Inductive Automation Ignition is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MantisBT 1.2.13 <= 1.2.19 XSS

Binary data 8678.prm...

McAfee Email Gateway Digest Token Reflected XSS (SB10099)

The remote host has a version of McAfee Email Gateway MEG installed that is affected by a reflected cross-site scripting vulnerability due to improper validation of user-supplied input to unspecified tokens in digest messages. A remote attacker can exploit this, via a specially crafted request, t...

Microsoft Exchange Server Privilege Escalation Vulnerability (3040856)

This host is missing an important security update according to Microsoft Bulletin MS15-026. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...