xss vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling...

Apache Sling Xss Protection Api Apache Sling Xss Protection Api 2.0.0 Apache Sling Xss Protection Api Compat 1.1.0

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via...

Cisco Asyncos -

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813....

Jenkins Jenkins Redhat Openshift

4.3

CVSSv2

WordPress before 5.5.2 allows XSS associated with global variables....

Wordpress Wordpress

4.3

CVSSv2

WordPress before 5.5.2 allows stored XSS via post slugs....

Wordpress Wordpress1 Github repository available

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812....

Jenkins Jenkins Redhat Openshift

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20....

Apache Struts

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3....

Redhat Satellite 6.0.32 Github repositories available

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs...

Cisco Unified Communications Domain Manager 8.0

3.5

CVSSv2

A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users....

Redhat Satellite

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook