2017

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x befor

Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.127

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Networ

A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unaut

A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a c

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker

An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.

Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary we

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script

In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open redirect vulnerability. A rem

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrar

Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbit

Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inje

Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect us

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitr

Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary

The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_refer

phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter.

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker

A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 al

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 al

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 al

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when reg

FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the Use

In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redi

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows u

Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter o

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME e

Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows rem

FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during

PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and columns resulting in po

Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stea

MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user w

Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML

Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission re

Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack