Browse CVEs

Debian Linux MEDIUM 6.1

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, t…

Debian Linux MEDIUM 6.1

A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template im…

Debian Linux MEDIUM 6.1

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree…

Debian Linux MEDIUM 6.1

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail mess…

Debian Linux MEDIUM 5.4

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8,…

Debian Linux MEDIUM 6.1

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has b…

Debian Linux MEDIUM 6.1

A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code …

Debian Linux MEDIUM 6.1

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScrip…

Debian Linux MEDIUM 6.1

In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scriptin…

Debian Linux MEDIUM 6.1

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks a…

Debian Linux MEDIUM 5.4

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XS…

Debian Linux MEDIUM 6.1

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xm…

Debian Linux MEDIUM 6.1

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and us…

Debian Linux MEDIUM 6.1

Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious java…

Debian Linux MEDIUM 6.1

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary we…

Debian Linux MEDIUM 6.1

ZF2014-03 has a potential cross site scripting vector in multiple view helpers

Debian Linux MEDIUM 6.1

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

Debian Linux MEDIUM 6.1

smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)

Debian Linux MEDIUM 6.1

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_…

Debian Linux MEDIUM 6.1

A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.

Debian Linux MEDIUM 6.1

PostfixAdmin 2.3.4 has multiple XSS vulnerabilities

Debian Linux MEDIUM 6.1

phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag.

Debian Linux MEDIUM 6.1

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar

Debian Linux MEDIUM 6.1

JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.

Debian Linux MEDIUM 6.1

WebApp JSP Snoop page XSS in jetty though 6.1.21.

Debian Linux MEDIUM 6.1

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.