2020

13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter.

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter.

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.

Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed

IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cros

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failur

IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information disclo

IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the syst

IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized act

IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed techn

Vulnerability in SuiteCommerce Advanced (SCA) Sites component of Oracle NetSuite service. Supported versions that are af

Vulnerability in the SuiteCommerce Advanced (SCA) component of Oracle NetSuite service. Supported versions that are affe

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08.* before 16.08

An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows XSS attacks.

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of com_content leads to a

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext,

Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests o

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is deployed with active debugging code that can create unintended en

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The informati

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows use

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session

IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session

webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search."

WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.

PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php.

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and fo

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in a specific REST API of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated

A vulnerability in Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, local attacker to obt

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauth

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an u

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authentica

A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dyn

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenti

Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticat

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overw

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow a

A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local

A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administra

A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."

NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."