Filtered by CWE-79
Total 37636 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-19782 1 Freshrss 1 Freshrss 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the (1) c parameter or (2) a parameter.
CVE-2018-19775 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19774 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19773 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19772 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19771 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter.
CVE-2018-19770 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19769 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19768 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19767 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19766 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19765 1 Infovista 1 Vistaportal 2024-11-21 N/A
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19752 1 Domainmod 1 Domainmod 2024-11-21 N/A
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
CVE-2018-19751 1 Domainmod 1 Domainmod 2024-11-21 N/A
DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
CVE-2018-19750 1 Domainmod 1 Domainmod 2024-11-21 N/A
DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
CVE-2018-19749 1 Domainmod 1 Domainmod 2024-11-21 N/A
DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.
CVE-2018-19727 1 Adobe 1 Experience Manager 2024-11-21 N/A
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2018-19726 1 Adobe 1 Experience Manager 2024-11-21 N/A
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2018-19724 1 Adobe 1 Experience Manager 2024-11-21 N/A
Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2018-19694 1 Hms-networks 16 Netbiter Ec150, Netbiter Ec150 Firmware, Netbiter Ec250 and 13 more 2024-11-21 N/A
HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.