Lucene search
+L

2488 matches found

OSV
OSV
•added 2016/07/28 1:59 a.m.•16 views

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

6.1CVSS5.9AI score0.01009EPSS
SaveExploits0References3
NVD
NVD
•added 2016/07/08 1:59 a.m.•27 views

CVE-2016-0313

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

5.4CVSS5AI score0.00622EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•8 views

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information

XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.5AI score0.03728EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•11 views

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information

XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.5AI score0.03728EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•9 views

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information

XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...

4.3CVSS5.5AI score0.03788EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2016/07/05 1:59 a.m.•9 views

DEBIAN-CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

6.1CVSS8.3AI score0.01103EPSS
SaveExploits0References1
OSV
OSV
•added 2016/07/03 1:59 a.m.•8 views

DEBIAN-CVE-2016-5731

Cross-site scripting XSS vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message...

6.1CVSS8.3AI score0.01754EPSS
SaveExploits0References1
OSV
OSV
•added 2016/07/03 1:59 a.m.•13 views

CVE-2016-2081

Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.00765EPSS
SaveExploits0References2
OSV
OSV
•added 2016/06/18 1:59 a.m.•11 views

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

6.1CVSS5.9AI score0.00773EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/06/17 12:00 a.m.•13 views

IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-04104)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

5.4CVSS6.2AI score0.00622EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/06/17 12:00 a.m.•15 views

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...

4.3CVSS6.5AI score0.01009EPSS
SaveExploits0References2
OSV
OSV
•added 2016/06/04 2:59 p.m.•14 views

CVE-2016-1211

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS5.9AI score0.01417EPSS
SaveExploits0References3
OSV
OSV
•added 2016/05/26 2:59 p.m.•14 views

CVE-2016-4789

Cross-site scripting XSS vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified...

6.1CVSS5.9AI score0.01103EPSS
SaveExploits0References2
Prion
Prion
•added 2016/05/23 7:59 p.m.•35 views

Cross site scripting

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

4.3CVSS5.5AI score0.00773EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2016/05/22 1:59 a.m.•12 views

DEBIAN-CVE-2016-4567

Cross-site scripting XSS vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."...

6.1CVSS6AI score0.07351EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/05/19 12:00 a.m.•6 views

ChitaSoft SQL Injection Vulnerability

ChitaSoft suffers from a remote SQL injection vulnerability that allows remote attackers to execute malicious sql commands on the web application side or connect to dbms...

8.6AI score
SaveExploits0References1
OSV
OSV
•added 2016/05/17 2:08 p.m.•19 views

CVE-2016-3721

Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables...

6.5CVSS5AI score
SaveExploits0References6
OSV
OSV
•added 2016/05/10 7:59 p.m.•7 views

DEBIAN-CVE-2016-4561

Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...

6.1CVSS6.1AI score0.01465EPSS
SaveExploits0References1
NVD
NVD
•added 2016/05/10 7:59 p.m.•27 views

CVE-2016-4561

Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...

6.1CVSS6AI score0.01465EPSS
SaveExploits0References3
CNVD
CNVD
•added 2016/05/06 12:00 a.m.•13 views

IBM Security Identity Manager Virtual Appliance Cross-Site Scripting Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

5.4CVSS6.1AI score0.00644EPSS
SaveExploits0References1
Rows per page
Query Builder