Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

script security vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2015-1995
Multiple cross-site scripting (XSS) vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x prior to 7.2.5 Patch 5 allow remote malicious users to inject arbitrary web script or HTML via a crafted URL.
Ibm Security Qradar Incident Forensics 7.2.0Ibm Security Qradar Incident Forensics 7.2.1Ibm Security Qradar Incident Forensics 7.2.3Ibm Security Qradar Incident Forensics 7.2.5Ibm Security Qradar Incident Forensics 7.2.2Ibm Security Qradar Incident Forensics 7.2.4
383
VMScore
CVE-2007-6156
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) prior to 1.3.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) sig[0] and (2) sig[1] parameters.
Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.3.5Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.1.3
383
VMScore
CVE-2009-4837
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) prior to 1.4.3.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/ba...
Secureideas Basic Analysis And Security EngineSecureideas Basic Analysis And Security Engine 1.2Secureideas Basic Analysis And Security Engine 1.1.4Secureideas Basic Analysis And Security Engine 1.3.6Secureideas Basic Analysis And Security Engine 1.2.7Secureideas Basic Analysis And Security Engine 1.2.2Secureideas Basic Analysis And Security Engine 1.2.1Secureideas Basic Analysis And Security Engine 1.1.2Secureideas Basic Analysis And Security Engine 1.1Secureideas Basic Analysis And Security Engine 1.3.8Secureideas Basic Analysis And Security Engine 1.3.9Secureideas Basic Analysis And Security Engine 1.2.4Secureideas Basic Analysis And Security Engine 1.2.5Secureideas Basic Analysis And Security Engine 1.2.6Secureideas Basic Analysis And Security Engine 1.2.0Secureideas Basic Analysis And Security Engine 1.1.3Secureideas Basic Analysis And Security Engine 1.3.5
383
VMScore
CVE-2013-5300
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) prior to 4.3.0 allow remote malicious users to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched...
Alienvault Open Source Security Information Management 4.0.4Alienvault Open Source Security Information Management 4.0.3Alienvault Open Source Security Information Management 2.1.5-1Alienvault Open Source Security Information Management 2.1.5Alienvault Open Source Security Information ManagementAlienvault Open Source Security Information Management 3.1.9Alienvault Open Source Security Information Management 3.1.12Alienvault Open Source Security Information Management 2.1.2Alienvault Open Source Security Information Management 2.1Alienvault Open Source Security Information Management 4.2.2Alienvault Open Source Security Information Management 4.2Alienvault Open Source Security Information Management 3.1.10Alienvault Open Source Security Information Management 3.1Alienvault Open Source Security Information Management 1.0.6Alienvault Open Source Security Information Management 1.0.4Alienvault Open Source Security Information Management 4.1.3Alienvault Open Source Security Information Management 4.1.2Alienvault Open Source Security Information Management 4.1Alienvault Open Source Security Information Management 2.1.5-3Alienvault Open Source Security Information Management 2.1.5-2
445
VMScore
CVE-2015-1994
IBM Security QRadar Incident Forensics 7.2.x prior to 7.2.5 Patch 5 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie.
Ibm Security Qradar Incident Forensics 7.2.0Ibm Security Qradar Incident Forensics 7.2.5Ibm Security Qradar Incident Forensics 7.2.1Ibm Security Qradar Incident Forensics 7.2.3Ibm Security Qradar Incident Forensics 7.2.2Ibm Security Qradar Incident Forensics 7.2.4
435
VMScore
CVE-2008-0919
Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the dest parameter.
Open Source Security Information Management Os-sim 0.3.1alphaOpen Source Security Information Management Os-sim 0.3alphaOpen Source Security Information Management Os-sim 0.7.1Open Source Security Information Management Os-sim 0.8Open Source Security Information Management Os-sim 0.9.7Open Source Security Information Management Os-sim 0.9.8Open Source Security Information Management Os-sim 0.5.1Open Source Security Information Management Os-sim 0.5.2Open Source Security Information Management Os-sim 0.9Open Source Security Information Management Os-sim 0.9.1Open Source Security Information Management Os-sim 0.9.9 Rc1Open Source Security Information Management Os-sim 0.9.9 Rc2Open Source Security Information Management Os-sim 0.1alphaOpen Source Security Information Management Os-sim 0.2alphaOpen Source Security Information Management Os-sim 0.6.3Open Source Security Information Management Os-sim 0.7Open Source Security Information Management Os-sim 0.9.4Open Source Security Information Management Os-sim 0.9.5Open Source Security Information Management Os-sim 0.9.6Open Source Security Information Management Os-sim 0.6Open Source Security Information Management Os-sim 0.6.2Open Source Security Information Management Os-sim 0.9.2
383
VMScore
CVE-2016-8011
Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security (ENS) Web Control prior to 10.2.0.408.10 allows malicious users to inject arbitrary web script or HTML via a crafted web site.
Intel Security Mcafee Endpoint Security Web Control
383
VMScore
CVE-2014-3266
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and previous versions allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.
Cisco Security ManagerCisco Security Manager 4.5Cisco Security Manager 4.0.1Cisco Security Manager 4.0Cisco Security Manager 4.3Cisco Security Manager 4.2Cisco Security Manager 4.4Cisco Security Manager 4.1
383
VMScore
CVE-2008-4485
Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 prior to 4.2.9, 5.2 prior to 5.2.5, and 5.3 prior to 5.3.1.7 allows remote malicious users to inject arbitrary web script or HTML via the URL.
Bluecoat Security Gateway Os 4.2Bluecoat Security Gateway Os 5.2Bluecoat Security Gateway Os 5.3
383
VMScore
CVE-2012-2161
Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x prior to 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote malicious users to inject arbitrary web scri...
Ibm Security Appscan Source 8.5.0.1Ibm Security Appscan Source 7.0Ibm Security Appscan Source 8.0.0.2Ibm Security Appscan Source 8.5Ibm Security Appscan Source 8.0Ibm Security Appscan Source 8.0.0.1Ibm Spss Data Collection 6.0Ibm Spss Data Collection 6.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook