2018

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime S

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Serv

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompone

Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applicati

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: L

Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applicat

Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applica

Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Serv

Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications (subcompo

Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Serv

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Servic

Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Appli

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Application

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Fina

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, r

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, r

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthentic

A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticat

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to re

A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power o

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inj

The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject arbitrary HTML or JavaScrip

An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to s

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differen

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed wi

An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails

A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and b

An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the `module` value of the `index.php` file.

index.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpini

The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\template

The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\temp

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0

HP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and MFPs, HP OfficeJet Enterpr

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerab

Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerab

Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitr

Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to t

vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.

Some URLs provided by Jenkins global-build-stats plugin version 1.4 and earlier returned a JSON response that contained

The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullsc

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary

Cross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject a

In WonderCMS 2.3.1, the application's input fields accept arbitrary user input resulting in execution of malicious JavaS

IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter.

A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacke