Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in versions prior to Paessler PRTG Network Monitor 17.2.32.2279. A remote attacker can exploit this vulnerability to inject arbitrary...

Joyent Node.js Express web framework cross-site scripting vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. Express web framework is one of the lightweight Web framework. A cross-site scripting vulnerability exists in Joyent Node.js in the Express web framework versions...

OSNEXUS QuantaStor v4 Virtual Appliance Cross-Site Scripting Vulnerability

OSNEXUS QuantaStor v4 virtual appliance is a virtual storage appliance from OSNEXUS USA. A cross-site scripting vulnerability exists in OSNEXUS QuantaStor v4 virtual appliance versions prior to 4.3.1. A remote attacker can exploit this vulnerability to inject arbitrary HTML or JavaScript code...

Axis 2100 Cross-Site Scripting Vulnerability

AXIS 2100 is a network camera product from Axis Sweden. A cross-site scripting vulnerability exists in AXIS 2100 version 2.43. A remote attacker can exploit this vulnerability by injecting arbitrary JavaScript into the application response with the help of a URI...

CVE-2017-9459

Cross-site scripting XSS vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-11355

Multiple cross-site scripting XSS vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to the main page; the 2 beanReference parameter to the JavaBean viewer page; or the 3 pyTableName to the System database schema...

Mapbox.js Cross-Site Scripting Vulnerability

Mapbox.js is a U.S. Mapbox company's open source for rapid development of interactive map library . A cross-site scripting vulnerability exists in Mapbox.js version 1.x before 1.6.5 and version 2.x before 2.1.7. A remote attacker can exploit this vulnerability to inject script into the 'attribute...

DEBIAN-CVE-2017-11691

Cross-site scripting XSS vulnerability in authprofile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers...

ZenPhoto 'sanitize_string' function cross-site scripting vulnerability

Zenphoto is a free photo gallery content management system developed by the Zenphoto team. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in the 'sanitizestring' function in versions of ZenPhoto prior to 1.4.9. A remote...

CVE-2017-11458

Cross-site scripting XSS vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783...

Cross site scripting

Cross-site scripting XSS vulnerability in MetInfo 5.3.17 allows remote attackers to inject arbitrary web script or HTML via the Client-IP or X-Forwarded-For HTTP header to /include/stat/stat.php in a para action...

UBUNTU-CVE-2017-1000032

Cross-Site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parentid parameter to tree.php and drpaction parameter to datasources.php...

RISE Ultimate Project Manager 'Messaging' Cross-Site Scripting Vulnerability

Rise Ultimate Project Manager is a web-based project management system with a messaging section. A cross-site scripting vulnerability exists in the Subject and Message fields of the Messaging section in Rise Ultimate Project Manager version 1.8. A remote attacker can exploit this vulnerability to...

CVE-2017-10970

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2017-15920)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC. A remote attacker can exploit this vulnerability t...

PT-2017-18840

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.850 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the sec parameter to "view man.cgi", the referers parameter to "change referers.cgi", or the...

Netikus EventSentry Cross-Site Scripting Vulnerability

Netikus EventSentry is an event log monitoring manager from NETIKUS.NET that provides real-time log analysis, memory event correlation and threat attack response. A cross-site scripting vulnerability exists in versions of Netikus EventSentry prior to 3.2.1.44. A remote attacker can exploit this...

Mathias Kettner Check_MK Cross-Site Scripting Vulnerability

Mathias Kettner CheckMK is an open-source, general-purpose Nagios/Icinga monitoring system data collection plug-in from Mathias Kettner, Germany, which collects data from operating system and network components by employing a new methodology and supports the automated detection of monitoring item...

SAP Successfactors Cross-Site Scripting Vulnerability

SAP SuccessFactors is a cloud-based human resource management solution from SAP, Germany. The solution includes social and collaboration tools, a learning management system, performance management and people management. A cross-site scripting vulnerability exists in versions prior to SAP...

CMS Made Simple adminaddgroup.php file cross-site scripting vulnerability

CMS Made Simple is a free web-based content publishing system. A cross-site scripting vulnerability exists in the CMS Made Simple adminaddgroup.php file, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensiti...