EUVD-2020-7165

Malware in sbrugna...

EUVD-2021-31050

Malicious code in bioql PyPI...

LibreNMS cross-site scripting vulnerabilities

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. LibreNMS suffers from a cross-site scripting vulnerability that originates from a stored...

EasyVista Service Manager cross-site scripting vulnerability

EasyVista Service Manager is a server manager from EasyVista. A security vulnerability exists in EasyVista Service Manager version 2018.1.181.1, which stems from a cross-site scripting XSS vulnerability in the New Devices page that allows remote attackers to run arbitrary code via commented field...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

Cross site scripting

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

CVE-2021-44200: Improper Neutralization of Input During Web Page Generation

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

PT-2021-24061

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 28035 Description: A self cross-site scripting XSS issue was possible on the devices page. This allows an attacker to potentially inject malicious scripts into the webpage, affecting the user's...

CVE-2021-44200

Self cross-site scripting XSS was possible on devices page. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 28035...

Self cross-site scripting (XSS) was possible on devices page

...

CVE-2020-15037

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st parameter...

WiKID Systems 2FA Enterprise Server searchDevices.jsp SQL Injection Vulnerability

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A SQL injection vulnerability exists in WiKID Systems 2FA Enterprise Server searchDevices.jsp, which can be exploited by an attacker to submit a specially crafted SQL request to manipulate a databas...