Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
xss vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-6938
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook prior to 3.2.2 and Jupyter Notebook 4.0.x prior to 4.0.5 allows remote malicious users to inject arbitrary web script or HTML via a folder name. NOTE: this was originally r...
Jupyter Notebook 4.0.2
Jupyter Notebook 4.0.0
Jupyter Notebook 4.0.4
Jupyter Notebook 4.0.1
Jupyter Notebook 4.0.3
Fedoraproject Fedora 22
Fedoraproject Fedora 23
Fedoraproject Fedora 21
Opensuse Opensuse 13.1
Opensuse Opensuse 13.2
Ipython Notebook
NA
CVE-2015-0513
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) prior to 6.5u1 and ViPR SRM prior to 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafte...
Emc Watch4net
Emc Vipr Srm
NA
CVE-2014-2280
Cross-site scripting (XSS) vulnerability in the search feature in SeedDMS (formerly LetoDMS and MyDMS) prior to 4.3.4 allows remote malicious users to inject arbitrary web script or HTML via the query parameter.
Seeddms Seeddms
Seeddms Seeddms 3.4.3
Seeddms Seeddms 3.3.12
NA
CVE-2013-6990
FortiGuard FortiAuthenticator prior to 3.0 allows remote administrators to gain privileges via the command line interface.
Fortinet Fortiauthenticator
7.5
CVSSv3
CVE-2012-4030
Chamilo prior to 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote malicious users to delete arbitrary files.
Chamilo Chamilo Lms
NA
CVE-2005-4305
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote malicious users to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
Edgewall Software Trac 0.9.1
Edgewall Software Trac 0.9
Edgewall Software Trac 0.9.2
NA
CVE-2013-4433
Cross-site scripting (XSS) vulnerability in XHProf prior to 0.9.4 allows remote malicious users to inject arbitrary web script or HTML via the run parameter.
Php Xhprof 0.9.1
Php Xhprof 0.9.0
Php Xhprof 0.9.2
Php Xhprof
NA
CVE-2011-1523
Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the layer parameter.
Nagios Nagios 3.0
Nagios Nagios 2.0b5
Nagios Nagios 2.7
Nagios Nagios 3.1.2
Nagios Nagios 2.4
Nagios Nagios 2.0b6
Nagios Nagios 3.2.2
Nagios Nagios 3.2.0
Nagios Nagios 3.1.1
Nagios Nagios 3.0.6
Nagios Nagios 1.0b3
Nagios Nagios 1.1
Nagios Nagios 2.1
Nagios Nagios 1.0b6
Nagios Nagios 3.0.1
Nagios Nagios 1.0
Nagios Nagios 2.3.1
Nagios Nagios 2.2
Nagios Nagios 2.0b2
Nagios Nagios
Nagios Nagios 1.0b4
Nagios Nagios 3.0.2
6.1
CVSSv3
CVE-2020-26297
mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which could allow an malicious user to execute arbitrary JavaScript code on the page. The...
Rust-lang Mdbook
2 Github repositories
NA
CVE-2010-2788
Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki prior to 1.15.5, when wgEnableProfileInfo is enabled, allows remote malicious users to inject arbitrary web script or HTML via the filter parameter.
Mediawiki Mediawiki 1.3.13
Mediawiki Mediawiki 1.5.6
Mediawiki Mediawiki 1.4
Mediawiki Mediawiki 1.7.3
Mediawiki Mediawiki 1.6.3
Mediawiki Mediawiki 1.8.2
Mediawiki Mediawiki 1.5.1
Mediawiki Mediawiki 1.5.8
Mediawiki Mediawiki 1.4.11
Mediawiki Mediawiki 1.2.4
Mediawiki Mediawiki 1.12.1
Mediawiki Mediawiki 1.3.12
Mediawiki Mediawiki 1.4.1
Mediawiki Mediawiki 1.4.8
Mediawiki Mediawiki 1.5.3
Mediawiki Mediawiki 1.13.0
Mediawiki Mediawiki 1.9.3
Mediawiki Mediawiki 1.6.12
Mediawiki Mediawiki 1.5
Mediawiki Mediawiki 1.15.1
Mediawiki Mediawiki 1.4.9
Mediawiki Mediawiki 1.15.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »