Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Keycloak
MEDIUM 6.1
A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows a…
Cloudforms
MEDIUM 5.4
A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use this flaw to execute a stored XSS…
Quay
MEDIUM 6.1
A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use th…
Interchange
MEDIUM 6.1
XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentia…
Ceph Storage
MEDIUM 6.1
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS …
Certificate System
MEDIUM 5.4
A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a…
Enterprise Linux
MEDIUM 6.1
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery re…
Enterprise Linux
MEDIUM 6.1
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw…
Virtualization
MEDIUM 6.1
A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were includ…
Keycloak
MEDIUM 5.4
It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin console are not validated pro…
Subscription Asset Manager
MEDIUM 6.1
Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.
Decision Manager
MEDIUM 6.1
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers…
Decision Manager
MEDIUM 6.1
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application de…
Jboss Fuse
MEDIUM 6.1
swagger-ui has XSS in key names
3scale
MEDIUM 5.4
A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to …
Jboss Enterprise Application Platform
MEDIUM 6.1
JBossWeb Bayeux has reflected XSS
Openshift
MEDIUM 6.1
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
Jboss Keycloak
MEDIUM 6.1
JBoss KeyCloak: XSS in login-status-iframe.html
Satellite
MEDIUM 5.4
Katello has multiple XSS issues in various entities
Jboss Application Server
MEDIUM 5.4
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could…
Cloudforms Management Engine
MEDIUM 5.4
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure m…
Openshift Origin
MEDIUM 6.1
OpenShift Origin: Improperly validated team names could allow stored XSS attacks
Jboss Business Rules Management System
MEDIUM 6.1
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.
Hibernate Validator
MEDIUM 6.1
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially mal…
Pagure
MEDIUM 6.1
Pagure: XSS possible in file attachment endpoint
Jboss Aerogear
MEDIUM 6.1
JBoss AeroGear has reflected XSS via the password field
Cloudforms
MEDIUM 6.1
Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified ve…
Tectonic
MEDIUM 6.1
CoreOS Tectonic 1.7.x and 1.8.x before 1.8.7-tectonic.2 deploys the Grafana web application using default credentials (admin/admin) for the administr…
Openshift Container Platform
MEDIUM 5.4
A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 thr…
Cloudforms Management Engine
MEDIUM 6.5
A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user input is no…