6868 matches found
cPanel cross-site scripting vulnerability (CNVD-2021-31749)
Cpanel is a set of Web-based automated colocation platform from Cpanel, Inc. in the United States. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 94.0.3. The vulnerability stems from saving...
PT-2021-14033
Name of the Vulnerable Software and Affected Versions: IBM Content Navigator version 3.0.CD Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
CVE-2019-25028
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector...
CVE-2019-25028
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector...
Design/Logic Flaw
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector...
CVE-2019-25028
CVE-2019-25028 describes a stored cross-site scripting (XSS) vulnerability in Vaadin's Grid component (com.vaadin:vaadin-server). Affected are Vaadin Server versions 7.4.0–7.7.19 and 8.0.0–8.8.4. An attacker could inject malicious JavaScript via an unspecified vector, with potential impact includ...
PT-2021-6932
Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to the injection of JavaScript code into a specific parameter, which can be executed when accessing the dashboard or the main page. This can allow a remote...
SUSE: Security Advisory (SUSE-SU-2018:1334-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-9095
Name of the Vulnerable Software and Affected Versions com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 com.vaadin:vaadin-server versions 8.0.0 through 8.8.4 Description The issue is related to missing variable sanitization in the Grid component, allowing an attacker to inject malicious...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
Cross site scripting
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
CVE-2021-26812
Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...
PT-2021-17145
Name of the Vulnerable Software and Affected Versions: Jitsi Meet plugin for Moodle versions 2.7 through 2.8.3 Description: The issue allows attackers to craft a malicious URL that, when clicked on by users, can inject javascript code to be run by the application. This is achieved through a Cross...
Atlassian Jira Server & Data Center cross-site scripting vulnerabilities
Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is a server version of a defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA, which is a cross-site scripting vulnerability th...
Cross-Site Scripting (XSS)
sickrage is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser due to lack input validation and output sanitization...
PT-2021-16855
Name of the Vulnerable Software and Affected Versions SiCKRAGE versions 4.2.0 through 10.0.11.dev1 Description The issue arises from improper validation of user input when processed by the server, leading to Stored Cross-Site-Scripting XSS. This allows an attacker to inject arbitrary JavaScript...
CVE-2021-25925: Improper Neutralization of Input During Web Page Generation
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive...
PT-2021-12234
Name of the Vulnerable Software and Affected Versions IBM Jazz Team Server affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
PT-2021-14014
Name of the Vulnerable Software and Affected Versions: IBM Jazz Team Server affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...