6876 matches found
CVE-2020-27359
A cross-site scripting XSS issue in REDCap 8.11.6 through 9.x before 10 allows attackers to inject arbitrary JavaScript or HTML in the Messenger feature. It was found that the filename of the image or file attached in a message could be used to perform this XSS attack. A user could craft a messag...
CVE-2020-27359: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS issue in REDCap 8.11.6 through 9.x before 10 allows attackers to inject arbitrary JavaScript or HTML in the Messenger feature. It was found that the filename of the image or file attached in a message could be used to perform this XSS attack. A user could craft a messag...
CVE-2020-27182
Multiple cross-site scripting XSS vulnerabilities in konzept-ix publiXone before 2020.015 allow remote attackers to inject arbitrary JavaScript or HTML via appletError.jsp, jobjacketdetail.jsp, ixedit/editorcomponent.jsp, or the login form...
PT-2020-16653
Name of the Vulnerable Software and Affected Versions konzept-ix publiXone versions prior to 2020.015 Description The issue allows remote attackers to inject arbitrary JavaScript or HTML, which can be achieved via several endpoints, including "appletError.jsp", "job jacket detail.jsp",...
WSO API Manager Cross-Site Scripting Vulnerability
WSO2 API Manager is a suite of API lifecycle management solutions from WSO2, Inc. A cross-site scripting vulnerability exists in WSO2 API Manager version 3.1.0 and earlier versions, which originates from the failure to filter user input in the owner POST parameter of the administration interface ...
Cross-Site Scripting (XSS)
scratch-svg-renderer is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript via an SVG document due to the lack of escaping in the transformMeasurements function...
CVE-2020-7747
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller...
CVE-2020-7747 Cross-site Scripting (XSS)
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller...
CVE-2020-7747: Improper Neutralization of Input During Web Page Generation
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller...
HUAWEI Mate 20 JavaScript Injection Vulnerability
Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An injection vulnerability exists in previous versions of Huawei HUAWEI Mate 20 10.1.0.163 C00E160R3P8, which stems from a module that does not perform input checksums on specific inputs. An attacker can exploit this vulnerability...
PT-2020-19763
Name of the Vulnerable Software and Affected Versions lightning-server affected versions not specified Description The issue allows for the injection of malicious JavaScript code as part of a session controller, potentially leading to unauthorized access or control. Recommendations At the moment,...
CVE-2020-9092
HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...
CVE-2020-9092
HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...
CVE-2020-9092
HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...
CVE-2020-9092
CVE-2020-9092 affects Huawei Mate 20 devices running versions earlier than 10.1.0.163 (C00E160R3P8). The issue is a JavaScript injection vulnerability where a module does not verify specific input, allowing attackers to bypass the filter mechanism and inject JavaScript, potentially compromising t...
CVE-2019-13633
Blinger.io v1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can inject arbitrary JavaScript through built-in communication channels (Telegram, WhatsApp, Viber, Skype, Facebook, Vkontakte, Odnoklassniki), with exploitation impacting the admin-conversation panels: /conversations/all, /c...
PT-2020-20486
Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 Description The issue is related to a JavaScript injection vulnerability. A module does not properly verify a specific input, which could allow attackers to bypass the filter mechanism...
CVE-2020-9092: Improper Neutralization of Input During Web Page Generation
HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...
Design/Logic Flaw
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of...
