cross-site scripting vulnerabilities and exploits

(subscribe to this query)

NA

The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka...

Microsoft Anti-cross Site Scripting Library 3.1 Microsoft Anti-cross Site Scripting Library 4.01 EDB exploit available

NA

Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function....

Apple Cups 1.1 Apple Cups 1.1.1 Apple Cups 1.1.2 Apple Cups 1.1.3 Apple Cups 1.1.4 Apple Cups 1.1.5 Apple Cups 1.1.5-1 Apple Cups 1.1.5-2 Apple Cups 1.1.6 Apple Cups 1.1.6-1 Apple Cups 1.1.6-2 Apple Cups 1.1.6-3 Apple Cups 1.1.7 Apple Cups 1.1.8 Apple Cups 1.1.9 Apple Cups 1.1.9-1 Apple Cups 1.1.10 Apple Cups 1.1.10-1 Apple Cups 1.1.11 Apple Cups 1.1.12 Apple Cups 1.1.13 Apple Cups 1.1.14 Apple Cups 1.1.15 Apple Cups 1.1.16 Apple Cups 1.1.17 Apple Cups 1.1.18 Apple Cups 1.1.19 Apple Cups 1.1.20 Apple Cups 1.1.21 Apple Cups 1.1.22 Apple Cups 1.1.23 Apple Cups 1.2 Apple Cups 1.2.0 Apple Cups 1.2.1 Apple Cups 1.2.2 Apple Cups 1.2.3 Apple Cups 1.2.4 Apple Cups 1.2.5 Apple Cups 1.2.6 Apple Cups 1.2.7 Apple Cups 1.2.8 Apple Cups 1.2.9 Apple Cups 1.2.10 Apple Cups 1.2.11 Apple Cups 1.2.12 Apple Cups 1.3 Apple Cups 1.3.0 Apple Cups 1.3.1 Apple Cups 1.3.2 Apple Cups 1.3.3 Apple Cups 1.3.4 Apple Cups 1.3.5 Apple Cups 1.3.6 Apple Cups 1.3.7 Apple Cups 1.3.8 Apple Cups 1.3.9 Apple Cups 1.3.10 Apple Cups 1.3.11 Apple Cups 1.4 Apple Cups 1.4.0 Apple Cups 1.4.1 Apple Cups 1.4.2 Apple Cups 1.4.3 Apple Cups 1.4.4 Apple Cups 1.4.5 Apple Cups 1.4.6 Apple Cups 1.4.7 Apple Cups 1.4.8 Apple Cups 1.5 Apple Cups 1.5.0 Apple Cups 1.5.1 Apple Cups 1.5.2 Apple Cups 1.5.3 Apple Cups 1.5.4 Apple Cups 1.6 Apple Cups 1.6.1 Apple Cups 1.6.2 Apple Cups 1.6.3 Apple Cups 1.6.4 Apple Cups 1.7 Apple Cups 1.7.0 Apple Cups Apple Cups 1.7.1

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20....

Apache Struts

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3....

Redhat Satellite 6.0.31 Github repository available

6.1

CVSSv3

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection...

Ejs Ejs1 Github repository available

NA

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template....

Theforeman Foreman

6.1

CVSSv3

Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection....

Doxygen Doxygen

4.8

CVSSv3

A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages....

Jenkins Jenkins

5.4

CVSSv3

A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project...

Gitlab Gitlab

6.1

CVSSv3

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...

Apple Icloud Apple Itunes Apple Safari Apple Ipados Apple Iphone Os Apple Tvos Opensuse Leap 15.1

1 2 3 4 5 NEXT »