EUVD-2009-2367

Malware in sbrugna...

EUVD-2021-27685

Malicious code in bioql PyPI...

CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

Design/Logic Flaw

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

PT-2021-22912

Name of the Vulnerable Software and Affected Versions JForum2 version 2.7.0 Description The issue allows for XSS via a user signature, specifically in the ViewCommon.java file. Recommendations For JForum2 version 2.7.0, update the ViewCommon.java file to properly sanitize user input in signatures...

CVE-2021-40509: Improper Neutralization of Input During Web Page Generation

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

Coremail XT Cross-Site Scripting Vulnerability

Coremail XT is a set of enterprise-class mail system from China Yingshi Computer Technology Company. The system supports sending and receiving emails, enterprise address book, enterprise cloud disk and schedule synchronization. A cross-site scripting vulnerability exists in jsp/upload.jsp in...

Cross site scripting

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

CVE-2014-4164

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

CVE-2014-4164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html...

PT-2014-5715

Name of the Vulnerable Software and Affected Versions AlgoSec FireFlow version 6.3-b230 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a user signature to "SelfService/Prefs.html". This could potentially lead to unauthorized actions...

CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2082: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

PT-2012-3794

Name of the Vulnerable Software and Affected Versions Chaos tool suite aka CTools module versions 7.x-1.x before 7.x-1.0 Description The issue allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature, which is a cross-site...

CVE-2009-2372

Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user...

CVE-2009-2372

Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user...

CVE-2009-2372

Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user...