542 matches found
HPESBGN04109 rev.1 - HPE iLO Amplifier Pack, Multiple Remote Cross-Site Scripting (XSS) Vulnerabilities
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-11022 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...
HPESBGN04107 rev.2 - HPE iLO Amplifier Pack, Remote Cross-Site Scripting (XSS) Vulnerability
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.95 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26580 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:...
The vulnerability of D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500, DSR-500N, DSR-500AC, DSR-1000, DSR-1000N, and DSR-1000AC router microprogramming systems lies in the deficiencies in the algorithm for calculating the checksum. This vulnerability allows attackers to exploit their privileges and execute arbitrary code.
The vulnerability of the software for monitoring the performance of SolarWinds Database Performance Analyzer is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute a cross-site scripting attack remotely...
The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows attackers to perform cross-site scripting attacks.
The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
Vulnerability of syntactic analysis and event loading in SVG code of Firefox web browser and Thunderbird email client, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of syntax analysis and event loading in SVG code of Firefox web browsers and Thunderbird email clients is related to the lack of integrity checks. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PT-2020-4682 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Exchange Server, allowing for potential XSS attacks via a specially crafted link. It...
The vulnerability of the Knockout.js library, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.
The vulnerability of the Knockout.js library is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow a remote attacker to perform cross-site scripting attacks...
HPESBHF04044 rev.2 - HPE IP Console Switch G2 4x1Ex32, Remote Stored XSS and Code Injection.
Potential Security Impact: Remote: script injection, persistent cross site scripting SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE KVM IP Console Switches G2 4x1Ex32 Prior to 2.8.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-24627 |...
The vulnerability of the Jenkins automation server, related to the absence of the HTTP header Content-Security-Policy, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of the Jenkins automation server is related to the absence of the HTTP header Content-Security-Policy. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...
The vulnerability in the web interface of the Cisco TelePresence Management Suite’s centralized video system management software allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the web interface of the Cisco TelePresence Management Suite software for centralized video system management is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...
The vulnerability of the DNS functions of the CentOS Web Panel application management server, related to the lack of measures for cleaning input data, allows a perpetrator to execute cross-site attacks.
DNS Functionality of the CentOS Web Panel application is vulnerable. Exploiting this vulnerability could allow a malicious actor to execute cross-site scripting attacks from a remote location...
The vulnerability of the REST adapter of the SAP Process Integration integration platform allows attackers to execute cross-site scripting attacks.
The vulnerability of the REST adapter of the SAP Process Integration integration platform is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to perform cross-site scripting (XSS) attacks.
The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability in the PHP interpreter’s error page 404 allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability in the PHP interpreter’s error page 404 exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2019-19129
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute a cross-site scripting attack.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...
The vulnerability of the Cisco Prime Service Catalog’s management web interface allows attackers to execute cross-site scripting attacks.
The vulnerability in the Cisco Prime Service Catalog’s web interface management interface is related to insufficient verification of the data entered by users. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2019-11982
A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...