← Back
CWE-79

49,093 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

JSON object

Loading...

CVEs (49,093)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4399
1Hp
1Network Node Manager I
Nov 21, 2024
Aug 6, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).
CVE-2016-4392
1Hp
1Business Service Management
Nov 21, 2024
Aug 6, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1.
CVE-2018-14977
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070.
CVE-2018-14976
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS.
CVE-2018-14975
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS.
CVE-2018-14974
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS.
CVE-2018-14973
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS.
CVE-2018-14972
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS.
CVE-2018-14971
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS.
CVE-2018-14970
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.
CVE-2018-14969
1Q Cms
1Qcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.
CVE-2018-14964
1Emlsoft Project
1Emlsoft
Nov 21, 2024
Aug 6, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.
CVE-2018-14962
1Zzcms
1Zzcms
Nov 21, 2024
Aug 6, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php.
CVE-2018-1422
1Ibm
1Rational Doors Next Generation
Nov 21, 2024
Aug 6, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the...Show more
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025.Show less
CVE-2017-12614
1Apache
1Airflow
Nov 21, 2024
Aug 6, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are...Show more
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.Show less
CVE-2018-14955
1Squirrelmail
1Squirrelmail
Nov 21, 2024
Aug 5, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mail message display page in SquirrelMail through 1.4.22 has XSS via SVG animations (animate to attribute).
CVE-2018-14954
1Squirrelmail
1Squirrelmail
Nov 21, 2024
Aug 5, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
CVE-2018-14953
1Squirrelmail
1Squirrelmail
Nov 21, 2024
Aug 5, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math xlink:href=" attack.
CVE-2018-14952
1Squirrelmail
1Squirrelmail
Nov 21, 2024
Aug 5, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<math><maction xlink:href=" attack.
CVE-2018-14951
1Squirrelmail
1Squirrelmail
Nov 21, 2024
Aug 5, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The mail message display page in SquirrelMail through 1.4.22 has XSS via a "<form action='data:text" attack.