CVE-2019-14918

XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etcro/web/internet/dhcpcliinfo.asp...

ZenPhoto cross-site scripting vulnerability (CNVD-2020-03272)

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in Zenphoto versions prior to 1.4.9. The vulnerability stems from a lack of proper validation of client-side dat...

Elasticsearch Kibana Cross-Site Scripting Vulnerability (CNVD-2020-03584)

Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A cross-site scripting vulnerability exists in Elasticsearch Kibana versions prior to 6.8.6 and prior to 7.5.1. The vulnerability stems from the WEB...

WSO2 Enterprise Integrator Cross-Site Scripting Vulnerability

WSO2 Enterprise Integrator is the core of the WSO2 Integration Agile Platform, an open source integration product for cloud-native and container-native projects. A cross-site scripting vulnerability exists in WSO2 Enterprise Integrator version 6.5.0. The vulnerability stems from a lack of proper...

TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server Cross-Site Scripting Vulnerabilities

TIBCO Spotfire Analytics Platform for AWS Marketplace is a data visualization and analytics platform for the AWS Marketplace, an online software store.TIBCO Spotfire Server is an intelligent, secure, flexible, and scalable tool that provides data visualization , discovery, organizing and predicti...

Siemens Polarion webclient cross-site scripting vulnerability (CNVD-2019-44255)

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2019-46403)

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A cross-site scripting vulnerability exists in Cloudera Manager versions 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x befo...

Xoops Cross-Site Scripting Vulnerability (CNVD-2019-42843)

Xoops is an open source PHP and MySQL based content management system from the Xoops team. The system can be used to create online communities. Xoops suffers from a cross-site scripting vulnerability. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2019-41878)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

Eclipse Jetty Cross-Site Scripting Vulnerability (CNVD-2019-42375)

Eclipse Jetty is the Eclipse Foundation of an open source , Java-based Web server and Java Servlet container . A cross-site scripting vulnerability exists in the Cookie Dump Servlet in Eclipse Jetty versions prior to 6.1.22. The vulnerability stems from a lack of proper validation of client-side...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-42431)

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. A cross-site scripting vulnerability exists in SAP Business Objects...

Cryptocat Cross-Site Scripting Vulnerability

Cryptocat is an open source online cryptographic chat application. In Cryptocat versions prior to 2.0.22, a cross-site scripting vulnerability exists in the 'handlePresence' function of the cryptocat.js file. An attacker can exploit this vulnerability to execute client-side code...

WordPress Easy Digital Downloads Recount Earnings extension cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Digital Downloads EDD Recount Earnings extension is a sales statistics plugin used in it. A cross-site scripting vulnerability...

WordPress Easy Digital Downloads Simple Shipping extension cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Easy Digital Downloads EDD Simple Shipping extension is a digital product sales plugin used in it. A cross-site...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-36990)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX 4.5.7 and prior versions. The...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37367)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-37375)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. An attacker can exploit this...

Jiangnan Online Judge Cross-Site Scripting Vulnerability (CNVD-2019-36852)

Jiangnan Online Judge is an online evaluation system for computer programming. The system is mainly used for compiling and executing the source code submitted by users and checking the correctness of the program source code. A cross-site scripting vulnerability exists in Jiangnan Online Judge...

OpenProject Cross-Site Scripting Vulnerability

OpenProject is an open source Web-based project management software . The software has project planning , task management , bug tracking and cost budgeting and other functions . A cross-site scripting vulnerability exists in the project list in OpenProject versions prior to 9.0.4 and 10.x version...

Jiangnan Online Judge Cross-Site Scripting Vulnerability

Jiangnan Online Judge is an online evaluation system for computer programming. The system is mainly used for compiling and executing the source code submitted by users and checking the correctness of the program source code. A cross-site scripting vulnerability exists in Jiangnan Online Judge...