CVE-2018-15714

Nagios XI 5.5.6 is affected by a reflected cross-site scripting vulnerability exploitable by remote, unauthenticated attackers via the oname and oname2 parameters. The issue is described across multiple sources (NVD, CNVD, PRION/OpenVAS entries) consistently as a cross-site scripting flaw in Nagi...

Cross site scripting

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...