CVE-2018-0565

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0558

Cybozu Mailwise 5.0.0–5.4.1 contains a reflected cross-site scripting (CWE-79) vulnerability in System settings, enabling injection of arbitrary script or HTML and potential session-local impact. The issue is confirmed across multiple sources (CVE-2018-0558 and related records). Attack vectors ar...

CVE-2018-0527

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0527

Cybozu Office is affected by CVE-2018-0527: a Cross-site scripting (CWE-79) vulnerability in Cybozu Office versions 10.0.0–10.7.0 that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The impact is an arbitrary script execution in the user’s browser. Reme...

CVE-2018-0603

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0557

CVE-2018-0557 affects Cybozu Mailwise versions 5.0.0–5.4.1. The vulnerability is a Stored cross-site scripting (CWE-79) in the E-mail Details Screen, allowing a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Impact is that an arbitrary script may be executed in th...

CVE-2018-0570

CVE-2018-0570 is an XSS vulnerability in baserCMS affecting baserCMS 4.1.0.1 and earlier and 3.0.15 and earlier. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details from multiple sources indicate that a site operator login...

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors...

phpMyAdmin Cross-Site Scripting Vulnerability (PMASA-2018-3) - Linux

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BloodBank v1.0 Cross-Site Scripting Vulnerability

BloodBank is a responsive blood bank and donor content management system CMS. BloodBank v1.0 suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-12588

Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...

CVE-2018-12588

The CVE concerns a cross-site scripting (XSS) vulnerability in PKP Open Monograph Press (OMP) templates/frontend/pages/searchResults.tpl. Affected versions are PKP OMP 1.2.0 through 3.1.1-2 (before 3.1.1-3). The issue allows remote attackers to inject arbitrary script/HTML via the catalog.noTitle...

CVE-2018-12588

Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...

TippingPoint Web Interface Reverse DNS Lookup Cross Site Scripting - Ver2

A cross-site scripting vulnerability exists in TippingPoint. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Security Bulletin: A security vulnerability has been identified in InfoSphere Data Architect (IDA) that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. (CVE-2015-7439)

Summary A Cross-site scripting XSS vulnerability has been identified in InfoSphere Data Architect IDA, as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software RSA4WS 8.5 through 9.5, and Rational Software Architect RealTime RSART 8.5...

CVE-2018-5754

Cross-site scripting XSS vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote attackers to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to the clipboard...

Canon PrintMe / EFI XSS Vulnerability

Canon PrintMe / EFI software is prone to a cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Dell EMC RSA Authentication Manager Cross-Site Scripting Vulnerability (CNVD-2018-11559)

Dell EMC RSA Authentication Manager is a centralized suite of binary authentication software from Dell USA. The software centralizes the management of binary identities, security tokens, methods and users across physical sites. A cross-site scripting vulnerability exists in RSA Authentication...

CVE-2018-10821

Cross-site scripting XSS vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel...

Cross site scripting

Cross-site scripting XSS vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitrary web script or HTML via the search panel...