CVE-2020-12817

CVE-2020-12817 affects Fortinet FortiAnalyzer prior to 6.4.1 and 6.2.5. It is an improper neutralization of input vulnerability that allows a remote authenticated attacker to inject script-related HTML tags via the Name parameter of Storage Connectors (stored XSS risk). Impact is described as ena...

CVE-2020-12817

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors...

CVE-2020-12816

FortiNAC prior to 8.7.2 is affected by an improper neutralization of input vulnerability that enables a stored XSS via the UserID of Admin Users. The issue requires authentication and is exploitable remotely to execute script code in the context of an admin user’s session. The root cause is impro...

CVE-2020-12816

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the UserID of Admin Users...

CVE-2020-12816

An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the UserID of Admin Users...

Lindy 42633 Cross-Site Scripting Vulnerability

The Lindy 42633 is a 4-port USB 2.0 Gigabit network server. A persistent cross-site scripting vulnerability exists in Lindy 42633 2.078.000. An attacker can exploit this vulnerability via a specially crafted server name to conduct cross-site scripting attacks...

jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method

A Cross-site scripting XSS vulnerability exists in JQuery. This flaw allows an attacker with the ability to supply input to the ‘HTML’ function to inject Javascript into the page where that input is rendered, and have it delivered by the browser...

Cross site scripting

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288

The CVE-2020-9288 entry concerns FortiWLC (Fortinet) with an improper neutralization of input, enabling a stored Cross-Site Scripting (XSS) attack via ESS profile or Radius Profile. Affected product: FortiWLC 8.5.1 (and prior versions per CNVD/CVE records). Authentication requirements: remote, wi...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

Cross-site Scripting (XSS)

verbb/comments is vulnerable to cross-site scripting XSS. It is possible because it does not sanitize the user-provided input for guest name username, allowing an attacker to inject and execute malicious scripts in a user's browser...

CVE-2020-6640

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Description Area...

Cross site scripting

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Description Area...

CVE-2020-13756

Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors or getSelectorsBySpecificity is called with input from an attacker...

CVE-2020-1956

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation...

ALPINE-CVE-2020-11008

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260GHSA-qm7j-c969-7j4q. The fix for that bug still left the door open for an exploit where some credential is leaked but...

Cross site scripting

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack XSS via the name parameter...

CVE-2020-6647

FortiADC dashboard contains an input handling weakness in the name parameter that enables cross-site scripting (XSS) when accessed by an authenticated user. The issue is described as an improper neutralization of input, allowing injected scripts through the name field. Details across connected re...

Easy RM to MP3 Converter 'Input' Local Buffer Overflow Vulnerability

Easy RM to MP3 Converter is a shareware program by Mini-stream Software that is mainly used to convert audio in RM format to MP3 format. A local buffer overflow vulnerability exists in Easy RM to MP3 Converter 'Input'. An attacker can exploit the vulnerability to cause a file to crash...