8846 matches found
CVE-2021-36175
FortiWebManager (Fortinet) is affected by CVE-2021-36175. The issue is an input handling flaw (CWE-79) that could allow an authenticated remote attacker to inject malicious script/tags through the name, description, or comments fields in several sections of FortiWebManager. Affected versions are ...
FortiWebManager - Injection vulnerabilities
An improper neutralization of input vulnerability CWE-79 in FortiWebManager may allow a remote authenticated attacker to inject malicious script/tags via the name/description/comments parameter of various sections of the device...
CVE-2021-24016
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host...
Input validation
An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host...
CVE-2021-24016
Fortinet FortiManager vulnerability CVE-2021-24016: An improper neutralization of formula elements in policy-name CSV/Excel fields can lead to arbitrary shell commands when a crafted IPv4 field is included and the exported configuration file is opened unsafely. Affected are FortiManager 6.4.3 and...
btcpay server 跨站脚本漏洞
btcpay server is a free and open source bitcoin payment processor that allows you to accept bitcoins without fees or intermediaries. A cross-site scripting vulnerability exists in btcpay server. The vulnerability stems from the susceptibility to incorrect input neutralization "cross-site scriptin...
CVE-2021-36823
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cusmin AGCA - Absolutely Glamorous Custom Admin WordPress plugin allows Stored XSS.This issue affects AGCA - Absolutely Glamorous Custom Admin WordPress plugin: from n/a through 6.8...
GHSA-CPQ8-X35G-M439 Cross-site Scripting in yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in arbitrary path handling...
CVE-2021-3812
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3811
adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Pi-Hole Adminlte 跨站脚本漏洞
Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole adminlte suffers from a cross-site scripting vulnerability that stems from the vulnerability to incorrect neutralization of input during web page generation "cross-site scripting"...
CVE-2021-3780
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3785
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3780
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3646
btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
btcpay server 跨站脚本漏洞
btcpay server is a free and open source bitcoin payment processor that allows you to accept bitcoins without fees or intermediaries. The btcpay server suffers from a cross-site scripting vulnerability that arises from the vulnerability to incorrect neutralization of input during web page generati...