Export limit exceeded: 422056 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 94793 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (94793 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-18674 | 1 Sir | 1 Gnuboard | 2024-11-21 | 6.1 Medium |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board tail contents" parameter, aka the adm/board_form_update.php bo_content_tail parameter. | ||||
| CVE-2018-18673 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menu_list_update.php me_link parameter. | ||||
| CVE-2018-18672 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter. | ||||
| CVE-2018-18671 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/board_form_update.php bo_mobile_content_head parameter. | ||||
| CVE-2018-18670 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter. | ||||
| CVE-2018-18669 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter. | ||||
| CVE-2018-18668 | 1 Sir | 1 Gnuboard | 2024-11-21 | N/A |
| GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter. | ||||
| CVE-2018-18660 | 1 Arcserve | 1 Udp | 2024-11-21 | 6.1 Medium |
| An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue. | ||||
| CVE-2018-18654 | 1 Debian | 1 Crossroads | 2024-11-21 | N/A |
| Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in a certain location under the /tmp directory, wait until a user process copies xr there, and then replace the entire contents of this subdirectory to include a Trojan horse xr. | ||||
| CVE-2018-18643 | 1 Gitlab | 1 Gitlab | 2024-11-21 | N/A |
| GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS. | ||||
| CVE-2018-18642 | 1 Gitlab | 1 Gitlab | 2024-11-21 | N/A |
| An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has XSS. | ||||
| CVE-2018-18638 | 1 Neatorobotics | 2 Botvac Connected, Botvac Connected Firmware | 2024-11-21 | N/A |
| A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to execute arbitrary commands via shell metacharacters in the ntp field within JSON data to the /robot/initialize endpoint. | ||||
| CVE-2018-18636 | 2 D-link, Dlink | 2 Dsl-2640t Firmware, Dsl-2640t | 2024-11-21 | N/A |
| XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter. | ||||
| CVE-2018-18635 | 1 Mailcleaner | 1 Mailcleaner | 2024-11-21 | N/A |
| www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows XSS via the admin/login/user/message/ PATH_INFO. | ||||
| CVE-2018-18631 | 1 Synacor | 1 Zimbra Collaboration Suite | 2024-11-21 | N/A |
| mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS. | ||||
| CVE-2018-18630 | 2 Changehealthcare, Mckesson | 6 Cardiology, Cardiology Firmware, Cardiology and 3 more | 2024-11-21 | 7.8 High |
| A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code. | ||||
| CVE-2018-18625 | 1 Grafana | 1 Grafana | 2024-11-21 | 6.1 Medium |
| Grafana 5.3.1 has XSS via a link on the "Dashboard > All Panels > General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099. | ||||
| CVE-2018-18624 | 2 Grafana, Redhat | 3 Grafana, Enterprise Linux, Openshift | 2024-11-21 | 6.1 Medium |
| Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099. | ||||
| CVE-2018-18623 | 2 Grafana, Redhat | 2 Grafana, Ceph Storage | 2024-11-21 | 6.1 Medium |
| Grafana 5.3.1 has XSS via the "Dashboard > Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099. | ||||
| CVE-2018-18622 | 1 Bijiadao | 1 Waimai Super Cms | 2024-11-21 | N/A |
| An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter. | ||||