Stormshield Network Security Cross-Site Scripting Vulnerability

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A cross-site scripting vulnerability exists in the command line interface of the SNS web server in Stormshield Network Security versions 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1...

Cross-site scripting vulnerability in multiple F5 products (CNVD-2019-32053)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in multiple F5 products. An attacker can exploit the vulnerability to execute...

DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 Cross-Site Scripting Vulnerability

DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 is a home wireless router from DIGISOL SYSTEMS India. A cross-site scripting vulnerability exists in the DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300. The vulnerability stems from the lack of proper validation of client data by the WEB...

GLPI Cross-Site Scripting Vulnerability (CNVD-2019-21438)

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A cross-site scripting vulnerability exists in the inc/user.class.php file i...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2019-21429)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion CMS versions prior to 4.1.4, which stems from a lack of proper...

Linear eMerge E3-Series Cross-Site Scripting Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A cross-site scripting vulnerability exists in the Linear eMerge E3-Series. The vulnerability stems from a lack of proper validation of client data by the web application. An...

CVE-2019-10721

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...

CVE-2019-10721

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...

Design/Logic Flaw

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...

CVE-2019-10721

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Security.cs, login.aspx, and register.aspx...

Grouptime Teamwire Client Cross-Site Scripting Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime Germany. A cross-site scripting vulnerability exists in the admin interface in Grouptime Teamwire Client. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

Pulse Secure Pulse Connect Secure Cross-Site Scripting Vulnerability (CNVD-2019-21083)

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. A cross-site scripting vulnerability exists in the welcome.cgi file in Pulse Secure PCS versions 8.1.x before 8.1R12, 8.2.x before 8.2R9, and...

Palo Alto Networks MineMeld Cross-Site Scripting Vulnerability

Palo Alto Networks MineMeld is a threat intelligence processing tool from Palo Alto Networks, USA. The product extracts metrics from multiple sources and compiles the metrics into multiple formats compatible with AutoFocus, PaloAltoNetworks Next-Generation Firewall, and other Security and...

mxGraph Cross-Site Scripting Vulnerability

mxGraph is a JavaScript charting library . A cross-site scripting vulnerability exists in mxGraph 4.0.0 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities

Document Title: =============== PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2184 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13472 CVE-ID: ======= CVE-2019-13472 Release Dat...

PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities

Document Title: =============== PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2184 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13472 CVE-ID: ======= CVE-2019-13472 Release Dat...

Arastta eCommerce Cross-Site Scripting Vulnerability

Arastta eCommerce is an open source eCommerce platform. A cross-site scripting vulnerability exists in Arastta eCommerce version 1.6.2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Magento cross-site scripting vulnerability (CNVD-2019-26243)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . There is a cross-site scripting vulnerability in Magento , the vulnerability stems from the lack of proper...

Magento cross-site scripting vulnerability (CNVD-2019-26221)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento Open Source versions prior to 1.9.4.2 a...

Magento cross-site scripting vulnerability (CNVD-2019-26238)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. There is a cross-site scripting vulnerability in Magento , the vulnerability stems from the lack of proper validati...