Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cross-site scripting vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2012-0007
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka...
Microsoft Anti-cross Site Scripting Library 3.1Microsoft Anti-cross Site Scripting Library 4.0
6.1
CVSSv3
CVE-2020-13666
Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions...
Drupal Drupal
NA
CVE-2014-2856
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function....
Apple Cups 1.1.12Apple Cups 1.1.13Apple Cups 1.1.19Apple Cups 1.1.20Apple Cups 1.1.22Apple Cups 1.1.5-2Apple Cups 1.1.6Apple Cups 1.1.6-1Apple Cups 1.2Apple Cups 1.2.11Apple Cups 1.2.12Apple Cups 1.2.9Apple Cups 1.3Apple Cups 1.3.2Apple Cups 1.3.3Apple Cups 1.4Apple Cups 1.4.5Apple Cups 1.4.6Apple Cups 1.5.0Apple Cups 1.5Apple Cups 1.6Apple Cups 1.1.1Apple Cups 1.1.10Apple Cups 1.1.16Apple Cups 1.1.17Apple Cups 1.1.2Apple Cups 1.1.21Apple Cups 1.1.3Apple Cups 1.1.4Apple Cups 1.1.7Apple Cups 1.1.8Apple Cups 1.2.0Apple Cups 1.2.4Apple Cups 1.2.5Apple Cups 1.3.0Apple Cups 1.3.1Apple Cups 1.3.6Apple Cups 1.3.7Apple Cups 1.4.0Apple Cups 1.4.1Apple Cups 1.4.2Apple Cups 1.5.4Apple Cups 1.5.3Apple Cups 1.6.4Apple Cups 1.6.3Apple Cups 1.7Apple Cups 1.1Apple Cups 1.1.14Apple Cups 1.1.15Apple Cups 1.1.23Apple Cups 1.1.6-2Apple Cups 1.1.6-3Apple Cups 1.2.2Apple Cups 1.2.3Apple Cups 1.3.4Apple Cups 1.3.5Apple Cups 1.4.7Apple Cups 1.4.8Apple Cups 1.7.1Apple CupsApple Cups 1.7.0Apple Cups 1.1.10-1Apple Cups 1.1.11Apple Cups 1.1.18Apple Cups 1.1.5Apple Cups 1.1.5-1Apple Cups 1.1.9Apple Cups 1.1.9-1Apple Cups 1.2.1Apple Cups 1.2.10Apple Cups 1.2.6Apple Cups 1.2.7Apple Cups 1.2.8Apple Cups 1.3.10Apple Cups 1.3.11Apple Cups 1.3.8Apple Cups 1.3.9Apple Cups 1.4.3Apple Cups 1.4.4Apple Cups 1.5.2Apple Cups 1.5.1Apple Cups 1.6.2Apple Cups 1.6.1
6.1
CVSSv3
CVE-2014-0141
Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3....
Redhat Satellite 6.0.3
6.1
CVSSv3
CVE-2015-5169
Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20....
Apache Struts
NA
CVE-2014-3653
Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template....
Theforeman Foreman
5.4
CVSSv3
CVE-2021-41029
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests...
Fortinet Fortiwlm
6.1
CVSSv3
CVE-2022-2217
Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0....
Parse-url Project Parse-url
6.1
CVSSv3
CVE-2020-13668
Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions...
Drupal Drupal
6.1
CVSSv3
CVE-2020-3867
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...
Apple IcloudApple ItunesApple SafariApple IpadosApple Iphone OsApple TvosOpensuse Leap 15.1Webkitgtk Webkitgtk
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-34595CVE-2022-23713CVE-2022-21786hard-codedremote attackerscross-site request forgeryCVE-2022-2274CVE-2021-37839CVE-2022-26135
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook