27443 matches found
PT-2019-6832 · Red Hat · Manageiq Evm
Name of the Vulnerable Software and Affected Versions: ManageIQ EVM affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-1931
A cross-site scripting XSS vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version...
CVE-2013-1932
A cross-site scripting XSS vulnerability in the configuration report page admconfigreport.php in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name...
CVE-2013-1951
A cross-site scripting XSS vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names...
Cross site scripting
A cross-site scripting XSS vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names...
Cross site scripting
A cross-site scripting XSS vulnerability in the configuration report page admconfigreport.php in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name...
Cross site scripting
A cross-site scripting XSS vulnerability in the configuration report page admconfigreport.php in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value...
CVE-2013-1951
CVE-2013-1951 affects MediaWiki: specific XSS vulnerability where an attacker can inject arbitrary script/HTML via Lua function names. Affected software includes MediaWiki prior to 1.19.5 and 1.20.x prior to 1.20.4; the underlying issue is triggered through Lua function name handling. The public ...
CVE-2013-1951
A cross-site scripting XSS vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names...
CVE-2013-1931
The CVE-2013-1931 entry describes a cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 that allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version. The connected documents confirm the affected product/version and the XSS nature but do ...
CVE-2010-1673
A cross-site scripting XSS vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment...
CVE-2010-1673
A cross-site scripting XSS vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment...
Cross site scripting
A cross-site scripting XSS vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment...
CVE-2010-1673
A cross-site scripting XSS vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment...
CVE-2010-1673
CVE-2010-1673 affects ikiwiki prior to 3.20101112, where an XSS flaw allows remote attackers to inject arbitrary script/HTML via a user comment. The root cause is not fully detailed in the provided documents beyond the basic description; several connected records corroborate the same vulnerabilit...
CVE-2018-18678
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...
CVE-2018-18678
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...
Design/Logic Flaw
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...
CVE-2018-18678
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroupformupdate.php gr110 parameter...
CVE-2018-18678
GNUBOARD5 before 5.3.2.0 is vulnerable to a stored/reflected-like XSS via the board group extra contents parameter in adm/boardgroup_form_update.php (gr_1~10). The issue affects GNUBOARD5 versions prior to 5.3.2.0 and can allow remote attackers to inject arbitrary scripts or HTML that execute in ...