SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2020-48591)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A cross-site scripting vulnerability exists in SAP Business Objects...

Plesk Obsidian Cross-Site Scripting Vulnerability

Plesk Obsidian is a mainframe control panel from the Swiss company Plesk. A cross-site scripting vulnerability exists in Plesk Obsidian version 18.0.17. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability ...

CVE-2020-15892

An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being forwarded to the ssi binary. On the login page, the web interface restricts the password input field to a fixed length...

Stack overflow

An issue was discovered in apply.cgi on D-Link DAP-1520 devices before 1.10b04Beta02. Whenever a user performs a login action from the web interface, the request values are being forwarded to the ssi binary. On the login page, the web interface restricts the password input field to a fixed length...

PT-2020-14691 · D Link · D-Link Dap-1520

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1520 versions prior to 1.10b04Beta02 Description: An issue was discovered in the apply.cgi of D-Link DAP-1520 devices. The problem arises when a user performs a login action from the web interface, and the request values are...

Docsify Cross-Site Scripting Vulnerability

docsify is a documentation website generator. A cross-site scripting vulnerability exists in versions prior to docsify 4.11.4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side cod...

PrestaShop cross-site scripting vulnerability (CNVD-2020-36217)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop. The vulnerability stems fr...

Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2020-53363)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35453)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 3.5.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2020-52700)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.3 and earlier. The...

GitLab Cross-Site Scripting Vulnerability (CNVD-2021-31223)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

Abstrium Pydio Cells Cross-Site Scripting Vulnerability

Abstrium Pydio Cells is a next-generation file-sharing platform developed in the Go language by Abstrium France. A cross-site scripting vulnerability exists in Abstrium Pydio Cells version 2.0.4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...

CloudBees Jenkins Subversion Partial Release Manager Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Subversion Partial Release Manager Plugin is...

Micro Focus ArcSight Logger Cross-Site Scripting Vulnerability (CNVD-2020-36749)

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A cross-site scripting vulnerability exists in Micro Focus...

CloudBees Jenkins Script Security Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Script Security Plugin is used in one of the...

Grafana Cross-Site Scripting Vulnerability (CNVD-2020-38873)

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. A cross-site scripting vulnerability exists in Grafana version 5.3.1. The vulnerabilit...

Critical 'Sign in with Apple' Bug Could Have Let Attackers Hijack Anyone's Account

Apple recently paid Indian vulnerability researcher Bhavuk Jain a huge $100,000 bug bounty for reporting a highly critical vulnerability affecting its 'Sign in with Apple ' system. The now-patched vulnerability could have allowed remote attackers to bypass authentication and take over targeted...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-31089)

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made...

Fork CMS Cross-Site Scripting Vulnerability (CNVD-2020-31119)

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork versions prior to 5.8.3. The vulnerability stems from the lack of proper validation of...

PCS DEXICON Cross-Site Scripting Vulnerability

PCS DEXICON is a solution for time recording and access control. A cross-site scripting vulnerability exists in the 'loginName' parameter in the loginaction.jsp file in PCS DEXICON version 3.4.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...