5642 matches found
PrestaShop cross-site scripting vulnerability (CNVD-2020-36217)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop. The vulnerability stems fr...
Red Hat Keycloak Cross-Site Scripting Vulnerability (CNVD-2021-17784)
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A cross-site scripting vulnerability exists in Red Hat Keycloak. The vulnerability stems from a lack of proper authentication of client-side da...
Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2020-53363)
Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...
Atlassian Jira Service Desk Server and Data Center Cross-Site Scripting Vulnerability
Atlassian Jira Service Desk Server and Atlassian Jira Service Desk Data Center are both products of Atlassian Australia.Atlassian Jira Service Desk Server is the server version of an IT service desk and request tracking Atlassian Jira Service Desk Server is the server version of an IT service des...
Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2021-36601)
Atlassian JIRA Server and Atlassian JIRA Data Center are both products of the Australian company Atlassian Atlassian.Atlassian JIRA Server is a server version of a defect tracking management system. The system is mainly used to track and manage all kinds of issues and defects in the...
TileServer GL Cross-Site Scripting Vulnerability
TileServer GL is an open source map server for vector blocks from the MapTiler team. A cross-site scripting vulnerability exists in the server.js file in TileServer GL 3.0.0 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...
Imperva Prevents Client-Side Attacks like Formjacking and Magecart
The Blindspot of Web Security is Client-side Code One of the troubling blindspots for security teams is third party JavaScript services embedded on a website. The popularity of JavaScript services used by developers and marketing teams means this blindspot is hiding an expanding attack service. I...
Adobe Magento WebForms Pro M2 Cross-Site Scripting Vulnerability
Adobe Magento is the United States Odo than Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways , etc. WebForms Pro M2 is used in which a form to build extensions . Adobe Magento 2 in the WebForms Pro M2 version...
Adobe Magento Form Builder Cross-Site Scripting Vulnerability
Adobe Magento is the United States Odo than Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways and other features . Form Builder is used in which a form to build extensions . Adobe Magento in the Form Builder...
Design/Logic Flaw
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client. NOTE: some reports...
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client. NOTE: some reports...
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client. NOTE: some reports...
WordPress Nexos theme cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Nexos theme is a real estate website theme plugin used in it. A cross-site scripting vulnerability exists in WordPress Nexos...
Rapid7 Metasploit Pro Cross-Site Scripting Vulnerability (CNVD-2021-39049)
Rapid7 Metasploit Pro is a suite of penetration testing software from the US company Rapid7. A cross-site scripting vulnerability exists in Rapid7 Metasploit Pro. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...
Rapid7 Metasploit Pro Cross-Site Scripting Vulnerability
Rapid7 Metasploit Pro is a suite of penetration testing software from the US company Rapid7. A cross-site scripting vulnerability exists in Rapid7 Metasploit Pro. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...
NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44586)
NeDi Consulting NeDi is a suite of open source software that supports the discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability stems from a lack of proper validation of...
Docker Desktop Elevation of Privilege Vulnerability
Docker Desktop is an application for MacOS and Windows computers for building and sharing containerized applications and microservices. An elevation of privilege vulnerability exists in com.docker.vmnetd in Docker Desktop 2.3.0.3. The vulnerability stems from a lack of client-side authentication...
SolarWinds Orion Platform Cross-Site Scripting Vulnerability
SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
