Lucene search
K

6666 matches found

Vulnrichment
Vulnrichment
added 2022/05/03 3:16 a.m.9 views

CVE-2022-20627 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...

5.4CVSS6AI score0.0053EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/05/03 3:16 a.m.9 views

CVE-2022-20629 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...

5.4CVSS6AI score0.0053EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/04/27 12:0 a.m.26 views

Cisco Unified Communications Products XSS (cisco-sa-cucm-xss-6MCe4kPF)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified CM Session Management Edition Unified CM SME, and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a...

6.1CVSS6.4AI score0.00779EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/04/22 12:24 a.m.17 views

Elgg Reflected XSS Vulnerability

VULNERABILITY DESCRIPTION The internalname parameter is not properly sanitized, which allows attacker to conduct Cross Site Scripting attack. This may allow an attacker to create a specially crafted URL that would execute arbitrary script code in a victim's browser PROOF-OF-CONCEPT/EXPLOIT http...

6.1CVSS7.1AI score0.01057EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2022/04/22 12:24 a.m.9 views

GHSA-MCFM-J5G6-W26F Elgg Reflected XSS Vulnerability

VULNERABILITY DESCRIPTION The internalname parameter is not properly sanitized, which allows attacker to conduct Cross Site Scripting attack. This may allow an attacker to create a specially crafted URL that would execute arbitrary script code in a victim's browser PROOF-OF-CONCEPT/EXPLOIT http...

6.1CVSS6.3AI score0.01057EPSS
Exploits1References8
CNVD
CNVD
added 2022/04/22 12:0 a.m.11 views

Cisco Unified CM和Unified CM SME跨站脚本漏洞

Cisco Unified Communications Manager is a call processing component of Cisco's Unified Communications System. Unified Communications Manager Session Management Edition is the session management version of Unified Communications Manager. A cross-site scripting vulnerability exists in Unified CM an...

6.1CVSS2.5AI score0.00779EPSS
Exploits0References1
Prion
Prion
added 2022/04/21 7:15 p.m.19 views

Cross site scripting

A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the...

4.3CVSS6.1AI score0.00761EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/21 6:50 p.m.25 views

CVE-2022-20788 Cisco Unified Communications Products Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified CM Session Management Edition Unified CM SME, and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a...

6.1CVSS6.1AI score0.00779EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/21 6:50 p.m.10 views

CVE-2022-20778 Cisco Webex Meetings Cross-Site Scripting Vulnerability

A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the...

6.1CVSS6.3AI score0.00761EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/21 6:50 p.m.19 views

CVE-2022-20778 Cisco Webex Meetings Cross-Site Scripting Vulnerability

A vulnerability in the authentication component of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. This vulnerability is due to insufficient validation of user-supplied input by the...

6.1CVSS6.2AI score0.00761EPSS
Exploits0References1
Prion
Prion
added 2022/04/06 7:15 p.m.15 views

Cross site scripting

A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This...

3.5CVSS5.3AI score0.00557EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/06 6:13 p.m.26 views

CVE-2022-20741 Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Network Diagrams application for Cisco Secure Network Analytics, formerly Stealthwatch Enterprise, could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This...

5.4CVSS5.5AI score0.00557EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/06 6:12 p.m.22 views

CVE-2022-20781 Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists...

5.4CVSS5.5AI score0.00557EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/18 12:0 a.m.35 views

Cisco Prime Infrastructure and Cisco EPN Manager跨站脚本漏洞

Cisco Prime Infrastructure is an application from Cisco, Inc. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure and Cisco EPN Manager, which could be exploited by an attacker to execute arbitrary script code or access sensitive browser-based information in the context of t...

6.1CVSS2.6AI score0.01213EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/02/17 3:0 p.m.9 views

CVE-2022-20659 Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This...

6.1CVSS6.1AI score0.01213EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2022/01/21 12:0 a.m.371 views

Banco Guayaquil 8.0.0 Cross Site Scripting

Document Title: =============== Banco Guayaquil Versión 8.0.0 IOS - Cross Site Scripting Stored Credits & Authors: ================== TaurusOmar - @TaurusOmar [email protected] taurusomar.com Vendor Homepage: https://apps.apple.com/ec/app/banco-guayaquil/id624963066 =============== Release...

0.1AI score
Exploits0
CNVD
CNVD
added 2022/01/21 12:0 a.m.18 views

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06378)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which stem...

6.1CVSS1.4AI score0.00759EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/18 12:0 a.m.23 views

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-04813)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.A cross-site scripting vulnerability exists in Cisco Security Manager, whic...

6.1CVSS3.4AI score0.00759EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/18 12:0 a.m.19 views

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-04814)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.A cross-site scripting vulnerability exists in Cisco Security Manager, whic...

6.1CVSS3.4AI score0.00759EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/18 12:0 a.m.20 views

Cisco Security Manager Cross-Site Scripting Vulnerability

Cisco Security Manager CSM is a set of enterprise-level management applications from Cisco, which are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices. cross-site scripting vulnerability exists in Cisco Security Manager, which stem...

6.1CVSS3.3AI score0.00759EPSS
Exploits0References1
Rows per page
Query Builder