Lucene search
+L

27443 matches found

Github Security Blog
Github Security Blog
added 2022/05/02 3:40 a.m.26 views

Buildbot Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the waterfall web status view status/web/waterfall.py in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.6AI score0.02008EPSS
SaveExploits0References12Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/02 3:18 a.m.38 views

Cross-site scripting in Apache Tomcat

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, relat...

4.3CVSS4AI score0.09125EPSS
SaveExploits1References37Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/02 3:14 a.m.28 views

MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

Cross-site scripting XSS vulnerability in the antispam feature security/antispam.py in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content...

4.3CVSS6AI score0.02346EPSS
SaveExploits0References13Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/02 3:13 a.m.23 views

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with 1 the rename parameter or 2 the drawing parameter aka the basename variable...

4.3CVSS6.1AI score0.0548EPSS
SaveExploits2References14Affected Software1
OSV
OSV
added 2022/05/02 3:13 a.m.7 views

GHSA-7HJM-HQGJ-XV9F MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in action/AttachFile.py in MoinMoin before 1.8.1 allow remote attackers to inject arbitrary web script or HTML via an AttachFile action to the WikiSandBox component with 1 the rename parameter or 2 the drawing parameter aka the basename variable...

4.3CVSS5.5AI score0.0548EPSS
SaveExploits2References13
OSV
OSV
added 2022/05/02 3:12 a.m.46 views

GHSA-C372-X57P-6X7V Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 ip, 3 username, or 4 description parameter to console/portal/Server/Monitorin...

4.3CVSS6.8AI score0.18003EPSS
SaveExploits4References8
OSV
OSV
added 2022/05/02 3:12 a.m.18 views

GHSA-6FXV-38XC-H866 Apache Jackrabbit contains Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

4.3CVSS5.5AI score0.21633EPSS
SaveExploits4References9
Github Security Blog
Github Security Blog
added 2022/05/02 3:12 a.m.36 views

Apache Jackrabbit contains Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

4.3CVSS4.3AI score0.21633EPSS
SaveExploits4References10Affected Software1
NVD
NVD
added 2022/05/02 12:15 a.m.27 views

CVE-2021-31673

A Dom-based Cross-site scripting XSS vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter...

6.1CVSS0.02559EPSS
SaveExploits4References2
Prion
Prion
added 2022/05/02 12:15 a.m.14 views

Cross site scripting

A Dom-based Cross-site scripting XSS vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter...

4.3CVSS6AI score0.02559EPSS
SaveExploits4References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/02 12:11 a.m.29 views

Plone Cross-site Scripting vulnerability in the LiveSearch module

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

4.3CVSS6.1AI score0.01144EPSS
SaveExploits1References6Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/02 12:0 a.m.21 views

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01997EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/01 11:59 p.m.21 views

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in macro/AdvancedSearch.py in moin and MoinMoin 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.0209EPSS
SaveExploits1References14Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/01 11:59 p.m.40 views

Trac Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

4.3CVSS5.6AI score0.01335EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2022/05/01 11:59 p.m.6 views

GHSA-X6JF-C7WH-7M7W Trac Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

6.1CVSS5.4AI score0.01335EPSS
SaveExploits1References9
OSV
OSV
added 2022/05/01 11:57 p.m.54 views

GHSA-6CJ8-C359-P7Q9 Drupal vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

4.3CVSS5.4AI score0.02467EPSS
SaveExploits0References11
OSV
OSV
added 2022/05/01 11:55 p.m.5 views

GHSA-PM5M-9H5R-XCRG phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the phpMyAdmin phpmyadmin extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.3CVSS5.8AI score0.01033EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/01 11:55 p.m.11 views

phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the phpMyAdmin phpmyadmin extension 3.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.01033EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/05/01 11:48 p.m.18 views

GHSA-54QJ-48VX-CR9F Django Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

6.1CVSS5.2AI score0.01323EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/05/01 11:45 p.m.35 views

Apache Tomcat Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the hostname attribute to host-manager/html/add...

4.3CVSS5.7AI score0.09776EPSS
SaveExploits2References46Affected Software2
Rows per page
Query Builder