| Max CVSS | 5.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-0526 | 5.0 |
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the mal
|
23-07-2021 - 12:55 | 06-08-2004 - 04:00 | |
| CVE-2018-5477 | 5.0 |
An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, a
|
09-10-2019 - 23:41 | 20-02-2018 - 19:29 | |
| CVE-2018-7274 | 4.3 |
Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).
|
07-10-2019 - 18:31 | 21-02-2018 - 00:29 | |
| CVE-2017-18039 | 4.3 |
The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.
|
29-04-2019 - 20:00 | 02-02-2018 - 14:29 | |
| CVE-2017-18081 | 4.3 |
The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the csrf token cookie.
|
26-04-2019 - 18:05 | 02-02-2018 - 14:29 | |
| CVE-2018-7273 | 4.9 |
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and us
|
01-03-2019 - 19:57 | 21-02-2018 - 00:29 | |
| CVE-2018-7261 | 3.5 |
There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
|
01-03-2019 - 18:14 | 21-02-2018 - 16:29 | |
| CVE-2017-18092 | 3.5 |
The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of
|
12-03-2018 - 15:25 | 19-02-2018 - 14:29 |