EUVD-2020-7165

Malware in sbrugna...

EUVD-2021-31050

Malicious code in bioql PyPI...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. LibreNMS suffers from a cross-site scripting vulnerability that originates from a stored...

EasyVista Service Manager 跨站脚本漏洞

EasyVista Service Manager is a server manager from EasyVista. A security vulnerability exists in EasyVista Service Manager version 2018.1.181.1, which stems from a cross-site scripting XSS vulnerability in the New Devices page that allows remote attackers to run arbitrary code via commented field...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

Cross site scripting

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44200: Improper Neutralization of Input During Web Page Generation

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

PT-2021-24061

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 28035 Description: A self cross-site scripting XSS issue was possible on the devices page. This allows an attacker to potentially inject malicious scripts into the webpage, affecting the user's...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

Self cross-site scripting (XSS) was possible on devices page

...

CVE-2020-15037

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

WiKID Systems 2FA Enterprise Server searchDevices.jsp SQL Injection Vulnerability

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A SQL injection vulnerability exists in WiKID Systems 2FA Enterprise Server searchDevices.jsp, which can be exploited by an attacker to submit a specially crafted SQL request to manipulate a databas...