27443 matches found
CVE-2018-19992
A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to adherents/type.php...
CVE-2018-19992
A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to adherents/type.php...
CVE-2018-19993
A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php...
CVE-2018-19414
CVE-2018-19414 describes multiple XSS vulnerabilities in Plikli CMS 4.0.0 . The issues allow remote attackers to inject arbitrary web script/HTML via (1) the keyword parameter to groups.php, (2) the username parameter to login.php, or (3) the date parameter to search.php. The incident is document...
CVE-2018-19993
CVE-2018-19993 affects Dolibarr 8.0.2 and is a reflected XSS vulnerability that allows an attacker to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php. The provided connected documents confirm the vulnerable component and entry details but do not specify a ve...
CVE-2018-19995
CVE-2018-19995 corresponds to a stored XSS vulnerability in Dolibarr 8.0.2. The issue allows remote authenticated users to inject arbitrary web script or HTML via the address or town fields (POST) sent to user/card.php. Affected product/version: Dolibarr 8.0.2. Root cause/impact: stored XSS that ...
CVE-2018-19992
Dolibarr 8.0.2 is affected by CVE-2018-19992: a stored XSS vulnerability allowing remote authenticated users to inject arbitrary script/HTML via the address or town POST parameters to adherents/type.php. This is confirmed across multiple connected sources (NVD OSV GNHS). The documents do not spec...
CVE-2018-19414
Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...
Cross site scripting
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...
CVE-2018-8918
Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...
CVE-2018-16778
Cross-site scripting XSS vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter aka the Search Field...
CVE-2018-16778
Cross-site scripting XSS vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter aka the Search Field...
CVE-2018-20306
A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...
CentOS Web Panel Cross-Site Scripting (CVE-2018-18774)
A cross-site scripting vulnerability exists in CentOS Web Panel. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Micro Focus NetIQ iManager Cross-Site Scripting Vulnerability
Micro Focus NetIQ iManager is a WEB-based application from Micro Focus UK. The program can manage, configure eDirectory objects using wireless devices. A cross-site scripting vulnerability exists in Micro Focus NetIQ iManager versions prior to 3.1 SP2, which can be exploited by remote attackers t...
RHEL 6 : rubygem packages (RHSA-2013:0728)
This update fixes one security issue in multiple rubygem packages for Red Hat OpenShift Enterprise 1.1.3. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Cross site scripting
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...