3147 matches found
CVE-2020-25158
A reflected cross-site scripting XSS vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations...
CVE-2022-20763
A vulnerability in the login authorization components of Cisco Webex Meetings could allow an authenticated, remote attacker to inject arbitrary Java code. This vulnerability is due to improper deserialization of Java code within login requests. An attacker could exploit this vulnerability by...
PT-2022-18162 · Unknown · Impresscms
Name of the Vulnerable Software and Affected Versions: ImpressCMS versions 1.4.3 and earlier Description: The issue allows remote attackers to inject code in an unintended way, enabling them to read and modify sensitive information from the database used by the application. If the system is...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Vulnerability Profile Spring Cloud Gateway is a brand new pro...
GHSA-VW6G-GH6C-8QWP Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module
Cross-site scripting XSS vulnerability in the Gogo Shell module before 5.0.2 from Liferay Portal 7.1.0 through 7.3.6 and 7.4.0, and Liferay DXP 7.1 before fix pack 23, 7.2 before fix pack 13, and 7.3 before fix pack 2 allows remote attackers to inject arbitrary web script or HTML via the output o...
CVE-2021-34359
A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4...
CVE-2021-34361
A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4...
CVE-2021-34361
CVE-2021-34361 is an XSS flaw in QNAP QTS Proxy Server. The vulnerability allows a remote attacker to inject HTML/script via crafted input in the Proxy Server component (affected by user-supplied data handling). According to the sources, the issue was fixed in QTS 4.5.x with Proxy Server 1.4.2 (2...
CVE-2021-34359: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4...
CVE-2021-34359
A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4...
Broadcom Symantec Layer7 API Management OAuth Toolkit跨站脚本漏洞
Broadcom Symantec Layer7 API Management OAuth Toolkit is a Layer7 API Management Community Blog from Broadcom, Inc. The Broadcom Symantec Layer7 API Management OAuth Toolkit suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to create a malicious URL fo...
CVE-2022-22142
CVE-2022-22142 describes a reflected XSS in the checkbox handling of php_mailform prior to version 1.40. The root cause is insufficient cleaning of user-supplied data in checkboxes, allowing a remote, unauthenticated attacker to inject arbitrary script via crafted requests (unspecified vectors). ...
The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software, related to the lack of measures taken for data cleaning at the management level, allows attackers to introduce malicious code.
The vulnerability of Moxa EN50155 TN-5900 series router microprogramming software is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to inject malicious code remotely...
Mustache remote code injection vulnerability
In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strictcallables is true when section value is controllable...
GHSA-4RMR-C2JX-VX27 Mustache remote code injection vulnerability
In Mustache.php v2.0.0 through v2.14.0, Sections tag can lead to arbitrary php code execution even if strictcallables is true when section value is controllable...
VulnCheck KEV: CVE-2018-19943
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code...
VulnCheck KEV: CVE-2019-7193
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system...
VulnCheck KEV: CVE-2018-19953
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code...
uDoctorAppointment v2.1.1 - (Multiple) Cross Site Scripting Vulnerability
Exploit Title: uDoctorAppointment v2.1.1 - 'Multiple' Cross Site Scripting XSS Document Title: =============== uDoctorAppointment v2.1.1 - Multiple XSS Vulnerabilities Product & Service Introduction: =============================== Clinic management, doctor or therapist online medical appointment...