CVE-2021-20688: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-25161

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

CVE-2021-25161: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

CVE-2020-24627

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-24627

A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches versions: G2 4x1Ex32 Prior to 2.8.3...

CVE-2020-5540: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script or HTML via a specially crafted URL...

CVE-2020-7140: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE IceWall SSO Dfw and Dgfw Domain Gateway Option could be exploited remotely to cause a remote cross-site scripting XSS. HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewallpatchacces...

CVE-2020-15400: Improper Neutralization of Input During Web Page Generation

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS...

CVE-2020-5557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-11982: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

CVE-2016-4392

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4392: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2018-7075: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting XSS vulnerability was identified in HPE Intelligent Management Center iMC PLAT version v7.3 E0506. The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version...

CVE-2018-13388: Improper Neutralization of Input During Web Page Generation

The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in attached files...

CVE-2018-0605: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

CVE-2017-5800

CVE-2017-5800 describes a remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics v3.0 . The issue stems from inadequate input filtering, enabling an attacker to inject and execute arbitrary HTML/JavaScript in a victim’s browser. Impact noted includes the potential thef...

CVE-2017-5800: Improper Neutralization of Input During Web Page Generation

A Remote Cross-Site Scripting XSS vulnerability in HPE Operations Bridge Analytics version v3.0 was found...

CVE-2017-8953: Improper Neutralization of Input During Web Page Generation

A Remote Cross-Site Scripting XSS vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found...

CVE-2017-18085

The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the key parameter...