CVE-2019-10070

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...

CVE-2019-10070: Improper Neutralization of Input During Web Page Generation

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality...

PT-2019-4252

Name of the Vulnerable Software and Affected Versions Apache Atlas versions 0.8.3 and 1.1.0 Description The issue is related to the lack of input data sanitization in the Apache Atlas metadata management system. This can be exploited by a remote attacker to perform cross-site scripting attacks,...

Cross site scripting

Multiple Reflected Cross-site Scripting XSS vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not properly sanitize user input encoded in base64. This also applies to the search functionality for the searchKey parameter...

CVE-2019-18205

Multiple Reflected Cross-site Scripting XSS vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not properly sanitize user input encoded in base64. This also applies to the search functionality for the searchKey parameter...

UBUNTU-CVE-2019-12385

An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches even guest users can dump any data contained in the database sessions, hashed passwords, etc.. This may lead to a full compromise of...

Sql injection

In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the search functionality. This issue is mitigated by the attacker needing permissions to create...

CVE-2019-14770

In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the search functionality. This issue is mitigated by the attacker needing permissions to create...

CVE-2019-14770: Improper Neutralization of Input During Web Page Generation

In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the search functionality. This issue is mitigated by the attacker needing permissions to create...

PT-2019-13822

Name of the Vulnerable Software and Affected Versions Backdrop CMS versions 1.12.x through 1.12.7 Backdrop CMS versions 1.13.x through 1.13.2 Description The issue allows some menu links within the administration bar to be crafted to execute JavaScript when the administrator is logged in and uses...

CVE-2019-2499

CVE-2019-2499 affects Oracle PeopleSoft Enterprise PeopleTools, subcomponent PIA Search Functionality, with affected versions 8.55–8.57. The vulnerability allows an unauthenticated attacker with network access via HTTP to impact data via PeopleTools, with potential unauthorized update/insert/dele...

CVE-2019-2499: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2019-1238

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 through 8.57 Description The issue is related to inadequate access control in the PIA Search Functionality component of Oracle PeopleSoft Enterprise PeopleTools. This can be exploited by a remote...

bocajuniors.com.ar XSS vulnerability

Open Bug Bounty ID: OBB-679412 Description| Value ---|--- Affected Website:| bocajuniors.com.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

necfru.jp XSS vulnerability

Open Bug Bounty ID: OBB-678005 Description| Value ---|--- Affected Website:| necfru.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bankdirector.com XSS vulnerability

Open Bug Bounty ID: OBB-674548 Description| Value ---|--- Affected Website:| bankdirector.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

awww.fanpop.com XSS vulnerability

Open Bug Bounty ID: OBB-673682 Description| Value ---|--- Affected Website:| awww.fanpop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

schmid-bus.de XSS vulnerability

Open Bug Bounty ID: OBB-673479 Description| Value ---|--- Affected Website:| schmid-bus.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

filmundo.de XSS vulnerability

Open Bug Bounty ID: OBB-673246 Description| Value ---|--- Affected Website:| filmundo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vzr.nl XSS vulnerability

Open Bug Bounty ID: OBB-669565 Description| Value ---|--- Affected Website:| vzr.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...