SilverStripe Cross-Site Scripting Vulnerability (CNVD-2020-10132)

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.4.5 before version 4.5.x and 4.5.2 before version 4.5.x cross-site...

Nextcloud Server Cross-Site Scripting Vulnerability (CNVD-2020-10426)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A cross-site scripting vulnerability exists in Nextcloud Server. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

Codoforum cross-site scripting vulnerability (CNVD-2020-14697)

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 4.8.8. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2020-10427)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A cross-site scripting vulnerability exists in Revive Adserver. The vulnerability stems from the lack of prope...

Codoforum DOM-type Cross-Site Scripting Vulnerability

Codoforum is a free forum package built with PHP and MySQL. A cross-site scripting vulnerability exists in Codologic Codoforum versions 4.8.4 and earlier. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabilit...

Nextcloud Server, Talk and Deck Cross-Site Scripting Vulnerabilities

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A cross-site scripting vulnerability exists in Nextcloud Server, Talk and Deck. The vulnerability stems from a lack of proper validation of client-side data b...

Maxum Rumpus Cross-Site Scripting Vulnerability

Maxum Rumpus is an FTP and Web file transfer server. A cross-site scripting vulnerability exists in Maxum Rumpus that can be exploited by an attacker to execute client-side code...

iTop Cross-Site Scripting Vulnerability (CNVD-2020-10004)

iTop is open source ITIL ITSM software. A cross-site scripting vulnerability exists in iTop 2.6.0 and earlier versions. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

CloudBees Jenkins Brakeman plugin cross-site scripting vulnerability

CloudBees Jenkins is a web application that can use a large number of servers as build slaves to handle larger build/test loads. A cross-site scripting vulnerability exists in the Brakeman plugin in CloudBees Jenkins, version 0.12 and earlier. The vulnerability stems from a lack of proper...

@bloomreach/hippo-theme (2.2.3), @covisint/cui-idm-b2x (>=0.2.1, <=1.3.0) +369 more potentially affected by CVE-2019-14863 via angular (>=1.0.8, <=1.4.14)

angular NPM version =1.0.8, =0.2.1, =0.2.0-dev, =1.2.6, =0.3.2, =1.0.4, =0.1.1, =1.0.4, =1.1.24, =1.0.3, =1.0.12, =1.0.7, =0.0.1, =3.2.10-0, =3.2.10-1 and more Source cves: CVE-2019-14863 Source advisory: OSV:GHSA-R5FX-8R73-V86C...

Wowza Streaming Engine Code Execution Vulnerability

Wowza Streaming Engine is a streaming media server software from Wowza Media Systems. The program supports live streaming, VOD, online video chat, and remote recording. A security vulnerability exists in Wowza Streaming Engine. The vulnerability stems from the lack of proper validation of client...

Lexmark printer cross-site scripting vulnerability

Lexmark printers is a printer product of Lexmark USA. A cross-site scripting vulnerability exists in the Lexmark printer MS812 and several previous series printers. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

Dojox Cross-Site Scripting Vulnerability

DojoX is a domain application for developing other Dojo features. A cross-site scripting vulnerability exists in dojox. The vulnerability stems from the WEB application lacking proper validation of client-side data. An attacker can exploit this vulnerability to execute client-side code...

Razer: Insecure HostnameVerifier within WebView of Razer Pay Android (TLS Vulnerability)

The tester discovered the Razer Pay Android application was vulnerable to a client side hijack which could have allowed the capture of important user data. Razer Fintech thanks the tester for their clear PoC...

Forcepoint Web Security Cross-Site Scripting Vulnerability

Forcepoint Web Security provides the defenses you need to protect against Advanced Points of Attack APTs in a proxy architecture, with instant threat analysis and forensic reporting at the gateway. A cross-site scripting vulnerability exists in Forcepoint Web Security. The vulnerability stems fro...

WordPress Elementor Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. elementor is a drag-and-drop page builder plugin used in it. A cross-site scripting vulnerability exists in the WordPress Elementor...

Apache NiFi Cross-Site Scripting Vulnerability (CNVD-2020-04926)

Apache NiFi is a data-flow based data processing and distribution system of the Apache Apache Software Foundation, USA. The system supports the configuration and transformation of data routing indicator maps and system intermediary logic. A cross-site scripting vulnerability exists in Apache NiFi...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-04923)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...

IBM Security Secret Cross-Site Scripting Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A cross-site scripting vulnerability exists in IBM Security Secret. The...

TYPO3 cross-site scripting vulnerability (CNVD-2020-04927)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit the...