CVE-2018-14503

Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2018-14503

CVE-2018-14503 is an XSS vulnerability in Coremail XT 3.0, affecting the intervalCheck.jsp page. An attacker can inject arbitrary web script/HTML via the sid parameter, enabling remote script execution in the context of the affected user. The connected documents specify the affected software (Cor...

CVE-2018-14503

Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15169

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...

Google Chrome Video Downloader Extension XSS

A cross-site scripting vulnerability exists in Google Chrome Video Downloader Extension. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

HPE Intelligent Management Center PLAT Cross-Site Scripting Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A cross-site scripting vulnerability...

CVE-2018-15169

The CVE-2018-15169 entry concerns Zoho ManageEngine Applications Manager 13 before build 13820, where a reflected XSS vulnerability exists in the /deleteMO.do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts include the ability to perform scr...

Open-AudIT Community 2.2.6 - Cross-Site Scripting Vulnerability

Exploit for windows platform in category web applications Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:https://opmantek.com/network-tools-download/open-audit/ Affected Version: 2.2.6 Category:...

Samsung Syncthru Web Service Multiple Vulnerabilities (Jul 2018)

Samsung Syncthru Web Service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

Persistent Cross-Site Scripting XSS vulnerability in the "Categories" feature in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the name field...

CVE-2018-12944

Persistent Cross-Site Scripting XSS vulnerability in the "Categories" feature in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the name field...

CVE-2018-12943

SeedDMS before 5.1.8 contains a cross-site scripting (XSS) vulnerability via the action URL parameter on every page that includes it, allowing remote attackers to inject arbitrary script or HTML. The issue is described consistently across multiple sources (NVD/CNVD), with the affected version ran...

NEC Platforms Calsos CSDX and CSDJ Series Products Cross-Site Scripting Vulnerability

NEC Platforms Calsos CSDX and CSDJ are both remote monitoring devices from NEC Platforms Japan. A cross-site scripting vulnerability exists in the NEC Platforms Calsos CSDX and CSDJ family of products, which can be exploited by remote attackers to inject arbitrary web script or HTML...

High severity vulnerability that affects jquery-ui

Withdrawn, accidental duplicate publish. Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

GHSA-G8Q2-24JH-5HPC High severity vulnerability that affects jquery-ui

Withdrawn, accidental duplicate publish. Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

CVE-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products CSDX 1.37210411 and earlier, CSDXP 4.37210411 and earlier, CSDXD 3.37210411 and earlier, CSDXS 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier,...

Cross site scripting

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...