5626 matches found
Azure DevOps Server Cross-Site Scripting Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server 2019, whi...
Materialize Cross-Site Scripting Vulnerability
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
Materialize cross-site scripting vulnerability (CNVD-2019-12908)
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
Dell EMC IsilonSD Management Server Cross-Site Scripting Vulnerability (CNVD-2019-12914)
Dell EMC IsilonSD Management Server is a management server for EMC IsilonSD storage from Dell USA. A cross-site scripting vulnerability exists in Dell EMC IsilonSD Management Server version 1.1.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker...
Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-14277)
Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in...
Roundup cross-site scripting vulnerability (CNVD-2019-09481)
Roundup is a command line, web and email issue tracking system. The system provides bug tracking, customer help desk and issue management. A cross-site scripting vulnerability exists in Roundup version 1.6, which stems from the failure of a WEB application to properly validate client-side data an...
Cisco Small Business RV320 and Cisco Small Business RV325 Cross-Site Scripting Vulnerabilities
The Cisco Small Business RV320 and the Cisco Small Business RV325 are both a VPN router from Cisco. The Cisco Small Business RV320 and Cisco Small Business RV325 are vulnerable to a cross-site scripting vulnerability that stems from a lack of proper validation of client data by a web application...
IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-09070)
IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...
IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2019-09071)
IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...
CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)
CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...
D-Link DSL-3782 Cross-Site Scripting Vulnerability
The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. A cross-site scripting vulnerability exists in the web interface of the D-Link DSL-3782 using firmware version 1.01, which stems from the lack of proper validation of client data by the WEB application. An attacker could...
Pydio Cross-Site Scripting Vulnerability (CNVD-2019-14091)
Pydio AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A cross-site scripting vulnerability exists in Pydio version 8, which stems from a lack of proper validation of client-side data by the WEB...
Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability (CNVD-2019-14249)
Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Expedition Migration Tool 1.1.8 and prior versions, which stems from a lack of proper validation of...
MyBB Cross-Site Scripting Vulnerability (CNVD-2021-25714)
MyBB MyBulletinBoard is the MyBB team developed a set of PHP and MySQL development of free and Web-based forum software. The software is easy to use , support for multiple languages , scalable and so on.ModCP Profile Editor is used in one of the ModCP configuration editor . The ModCP Profile Edit...
Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability
Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Expedition Migration Tool version 1.1.8 and prior versions, which stems from a lack of proper validation o...
Drupal cross-site scripting vulnerability (CNVD-2019-12155)
Drupal is an open source content management system developed by the Drupal community using the PHP language. A cross-site scripting vulnerability exists in Drupal version 7 prior to 7.65, version 8.6 prior to 8.6.13, and version 8.5 prior to 8.5.14, which stems from a lack of proper validation of...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2019-12161)
CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMSMS versi...
CVE-2019-7416
XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable...
