IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-14608)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

UliCMS XSS Injection Vulnerability

UliCMS is an open source content management system. A cross-site scripting vulnerability exists in UliCMS versions 2019.2 and 2019.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-si...

Symantec VIP Enterprise Gateway Cross-Site Scripting Vulnerability

Symantec VIP Enterprise Gateway is an enterprise security gateway product from Symantec USA. A cross-site scripting vulnerability exists in Symantec VIP Enterprise Gateway that stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

Cross-Site Scripting Vulnerabilities in Multiple ZyXEL Products

ZyXEL ZyWall 310 and others are products of Taiwan, China-based ZyXEL Corporation.ZyXEL ZyWall 310 is a 310 series VPN firewall appliance.ZyXEL ZyWall 110 is a 110 series VPN firewall appliance.ZyXEL USG1900 is a next-generation unified security gateway appliance. A cross-site scripting...

WordPress Tribulant Slideshow Gallery plugin cross-site scripting vulnerability (CNVD-2019-30133)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Tribulant Slideshow Gallery plugin is an image autoplay plugin used in it. A cross-site scripting vulnerability exists in...

waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2019-13569)

Waimai Super Cms is a takeaway ordering system. A cross-site scripting vulnerability exists in Waimai Super Cms version 20150505. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side...

Zarafa Webapp Cross-Site Scripting Vulnerability

Zarafa is a commercial, collaborative software solution from the Dutch company Zarafa. The product offers features such as Email and Webmail services, address book and calendar.Zarafa Webapp is a Web-based client application. A cross-site scripting vulnerability exists in Zarafa Webapp 2.0.1.4779...

CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2019-13094)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

WordPress WP All Import plugin cross-site scripting vulnerability (CNVD-2019-30135)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WP All Import plugin is used in one of the file import plugin. A cross-site scripting vulnerability exists in WordPress WP All Import...

Cantemo Portal Cross-Site Scripting Vulnerability

Cantemo Portal is a media asset management portal system from the Cantemo team in Sweden. The system is primarily used to manage media files such as video, audio and still images. A cross-site scripting vulnerability exists in Cantemo Portal versions prior to 3.2.13, 3.3.x prior to 3.3.8, and 3.4...

Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2019-13853)

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A cross-site scripting vulnerability exists in the airflow webserver servi...

WordPress wpape APE GALLERY plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wpape APE GALLERY plugin is an image management plugin used in it. A cross-site scripting vulnerability exists in the...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-10429)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Azure DevOps Server Cross-Site Scripting Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A cross-site scripting vulnerability exists in Microsoft Azure DevOps Server 2019, whi...

Materialize Cross-Site Scripting Vulnerability

Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...

Materialize cross-site scripting vulnerability (CNVD-2019-12908)

Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...

Dell EMC IsilonSD Management Server Cross-Site Scripting Vulnerability (CNVD-2019-12914)

Dell EMC IsilonSD Management Server is a management server for EMC IsilonSD storage from Dell USA. A cross-site scripting vulnerability exists in Dell EMC IsilonSD Management Server version 1.1.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker...

Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-14277)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in...

Roundup cross-site scripting vulnerability (CNVD-2019-09481)

Roundup is a command line, web and email issue tracking system. The system provides bug tracking, customer help desk and issue management. A cross-site scripting vulnerability exists in Roundup version 1.6, which stems from the failure of a WEB application to properly validate client-side data an...

Cisco Small Business RV320 and Cisco Small Business RV325 Cross-Site Scripting Vulnerabilities

The Cisco Small Business RV320 and the Cisco Small Business RV325 are both a VPN router from Cisco. The Cisco Small Business RV320 and Cisco Small Business RV325 are vulnerable to a cross-site scripting vulnerability that stems from a lack of proper validation of client data by a web application...