CVE Vulnerability

CWE-79

CVE-2018-1005

by

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka “Microsoft SharePoint Elevation of Privilege Vulnerability.” This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-1014, CVE-2018-1032, CVE-2018-1034.

CVE-2018-10051

by

iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter.

CVE-2018-10052

by

iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter.

CVE-2018-10059

by

Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER[‘PHP_SELF’] instead of $_SERVER[‘SCRIPT_NAME’] to determine a page name.

CVE-2018-1000887

by

Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script code in the “Site Name EN” parameter. This attack appears to be exploitable if the malicious user has access to the administration account.

CVE-2018-1000998

by

FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact–CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x.