PT-2018-18860

Name of the Vulnerable Software and Affected Versions Foxconn FEMTO AP-FC4064-T AP GT B38 5.8.3lb15-W47 LTE Build 15 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute arbitrary script on an unsuspecting user's browser via the configuration of a user account...

RT-AC1200HP vulnerable to cross-site scripting

Overview RT-AC1200HP provided by ASUS Japan Inc. is a wireless LAN router. RT-AC1200HP contains a cross-site scripting vulnerability CWE-79. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Securi...

PT-2018-9962

Name of the Vulnerable Software and Affected Versions: DiskPulse Enterprise versions 10.4 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 10.4 through 10.7, update to a version later than 10.7 to...

PT-2018-9966

Name of the Vulnerable Software and Affected Versions: DiskSorter Enterprise versions 9.5.12 through 10.7 Description: A cross-site scripting issue exists, potentially allowing for malicious script execution. Recommendations: For versions 9.5.12 through 10.7, update to a version that contains a f...

PT-2018-9855

Name of the Vulnerable Software and Affected Versions: wunderfarm WF Cookie Consent plugin version 1.1.3 Description: A persistent cross-site scripting issue has been identified in the web interface of the plugin, allowing the execution of arbitrary HTML/script code in a victim's web browser via ...

JVN#61081552: WordPress plugin "PixelYourSite" vulnerable to cross-site scripting

The WordPress plugin "PixelYourSite" provided by Minimal Work SRL contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the...

Mitel MiVoice Connect Cross-Site Scripting Vulnerability (CNVD-2018-08583)

Mitel MiVoice Connect R1707-PREM and Mitel ST are both products of Mitel Canada.Mitel MiVoice Connect R1707-PREM is a Unified Communications Management Appliance.ST is a videoconferencing product.conferencing is one of the notification components. conferencing is one of the conference notificatio...

Mitel MiVoice Connect Cross-Site Scripting Vulnerability

Mitel MiVoice Connect R1707-PREM and Mitel ST are both products of Mitel Canada.Mitel MiVoice Connect R1707-PREM is a Unified Communications Management Appliance.ST is a videoconferencing product.conferencing is one of the notification components. conferencing is one of the conference notificatio...

CVE-2018-10310

A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser...

PT-2018-9817

Name of the Vulnerable Software and Affected Versions: Catapult UK Cookie Consent plugin versions prior to 2.3.10 Description: A persistent cross-site scripting issue has been identified in the web interface of the Catapult UK Cookie Consent plugin for WordPress, allowing the execution of arbitra...

chromium-browser: Incorrect handling of plaintext files via file://

Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...

Cisco ASA WebVPN Cross-Site Scripting Vulnerability

The Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam, etc. WebVPN is one of the Web-based VPN applications. A...

CVE-2018-8831

A Persistent XSS vulnerability exists in Kodi formerly XBMC through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist...

PT-2018-17380

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allowed a remote attacker to cause the browser to execute scripts via a local non-HTML page by parsing documents as HTML in the Downloads...

Cacti cross-site scripting vulnerability (CNVD-2018-08667)

Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. Cacti suffers from a cross-site scripting vulnerability. The vulnerability arises because the getcurrentpage function in lib/functions.php relies on...

SAP Solution Manager Incident Management Work Center Cross-Site Scripting Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

Google Chrome interstitials command execution vulnerability

Google Chrome is a web browser developed by Google Inc. interstitials is one of the pop-up ads plug-ins. A security vulnerability exists in interstitials in Google Chrome, which stems from the program failing to properly validate user-submitted input. The vulnerability can be exploited by a remot...

CVE-2018-1000154

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page CWE-80 vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser...

PT-2018-18985

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Redbus Clone Script version 3.0.6 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the ter from or tag parameter in the "results.php" endpoint...

Cacti cross-site scripting vulnerability (CNVD-2018-08317)

Cacti is based on PHP, MySQL, SNMP and RRDTool developed a set of graphical analysis of network traffic monitoring tools . Cacti suffers from a cross-site scripting vulnerability, which is caused by failing to properly filter HTML code from user-supplied input before displaying it, and can be...