Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5093 matches found

Prion
Prion•added 2018/04/25 1:29 p.m.•19 views

Cross site scripting

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

3.5CVSS5.2AI score0.01255EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2018/04/25 1:00 p.m.•28 views

CVE-2017-1750

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.2AI score0.01255EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2018/04/25 1:00 p.m.•30 views

CVE-2018-1363

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.2AI score0.01255EPSS
SaveExploits0References3
Prion
Prion•added 2018/04/23 1:29 p.m.•18 views

Cross site scripting

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

4.3CVSS5.7AI score0.01177EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2018/04/23 1:29 p.m.•17 views

CVE-2017-1486

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.01177EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2018/04/23 1:00 p.m.•28 views

CVE-2017-1486

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.8AI score0.01177EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/20 9:29 p.m.•16 views

Cross site scripting

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

4.3CVSS6.4AI score0.00798EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2018/04/20 9:29 p.m.•27 views

CVE-2014-0883

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

6.1CVSS5.9AI score0.00798EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2018/04/20 9:00 p.m.•28 views

CVE-2014-0883 IBM Power Hardware Management Console cross-site scripting

IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

4.3CVSS5.9AI score0.00798EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/17 3:29 p.m.•24 views

Cross site scripting

IBM WebSphere Portal 8.0.0 through 8.0.0.1, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

3.5CVSS5.2AI score0.00948EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS•added 2018/04/17 12:00 a.m.•18 views

IkiWiki Detection (Web UI)

Detection of IkiWiki via Web UI. The script sends a GET request to the server and attempts to detect the presence of IkiWiki. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7AI score
SaveExploits0References1
NVD
NVD•added 2018/04/12 3:29 p.m.•26 views

CVE-2017-1790

IBM DOORS Next Generation DNG/RRC 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

5.4CVSS5.2AI score0.00743EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/12 3:29 p.m.•27 views

Cross site scripting

IBM DOORS Next Generation DNG/RRC 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

3.5CVSS5.2AI score0.00743EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist•added 2018/04/12 3:00 p.m.•30 views

CVE-2017-1790

IBM DOORS Next Generation DNG/RRC 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

5.2AI score0.00743EPSS
SaveExploits0References2
Prion
Prion•added 2018/04/11 4:29 p.m.•26 views

Cross site scripting

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140918...

4.3CVSS5.7AI score0.01298EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2018/04/11 4:00 p.m.•29 views

CVE-2018-1483

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 140918...

6.1CVSS5.9AI score0.01298EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus•added 2018/04/06 12:00 a.m.•44 views

Amazon Linux AMI : mailman (ALAS-2018-985)

Cross-site scripting XSS vulnerability in web UI A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions. CVE-2018-5950 CSRF...

8.8CVSS6.9AI score0.04569EPSS
SaveExploits3References3
OSV
OSV•added 2018/04/04 6:29 p.m.•7 views

CVE-2017-1772

IBM Worklight IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.4AI score0.01298EPSS
SaveExploits0References3
Prion
Prion•added 2018/04/04 6:29 p.m.•18 views

Cross site scripting

IBM Worklight IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

4.3CVSS5.7AI score0.01298EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2018/04/04 6:00 p.m.•33 views

CVE-2017-1772

IBM Worklight IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

6.1CVSS5.8AI score0.01298EPSS
SaveExploits0References3
Rows per page
Query Builder