6847 matches found
CVE-2018-13388: Improper Neutralization of Input During Web Page Generation
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in attached files...
Stored Cross-site Scripting Vulnerabilities in Qingdao Easoft Tianchuang Ranzhi Collaboration Management System (QDTMS)
Ranch Coworking Management System is an enterprise coworking system. A stored cross-site scripting vulnerability exists in several places in Ranzhi Collaboration Management System. Attackers can insert malicious js code in the page to get user cookies and other information, resulting in user...
PT-2018-12949
Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...
PT-2018-6593
Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...
PT-2018-6474
Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...
PT-2018-12256
Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...
IBM Planning Analytics Cross-Site Scripting Vulnerability
IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics versions 2.0.0 through 2.0.4...
IBM FileNet Content Manager Cross-Site Scripting Vulnerability (CNVD-2018-13447)
IBM FileNet Content Manager is a content management solution for the FileNet P8 platform from IBM USA. The solution combines document management with ready-to-use workflow tools to manage images, video, Web content, compliance documents, and more. A cross-site scripting vulnerability exists in IB...
CVE-2018-11450: Improper Neutralization of Input During Web Page Generation
A reflected Cross-Site-Scripting XSS vulnerability has been identified in Siemens PLM Software TEAMCENTER V9.1.2.5. If a user visits the login portal through the URL crafted by the attacker, the attacker can insert html/javascript and thus alter/rewrite the login portal page. Siemens PLM Software...
Jirafeau cross-site scripting vulnerability (CNVD-2018-13451)
Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the search file by name form in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to inject JavaScript and manipulate the user session...
PT-2018-13081
Name of the Vulnerable Software and Affected Versions IBM FileNet Content Manager versions 5.2.1 through 5.5.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...
PT-2018-5390
Name of the Vulnerable Software and Affected Versions: IBM Jazz based applications affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2018-5395
Name of the Vulnerable Software and Affected Versions: IBM Quality Manager RQM versions 5.0.x and 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2018-13085
Name of the Vulnerable Software and Affected Versions IBM FileNet Content Manager versions 5.2.1 through 5.5.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...
IBM RQM/RCLM Cross-Site Scripting Vulnerability (CNVD-2018-12635)
IBM Rational Quality Manager is a Web-based collaborative quality management solution.IBM Rational Collaborative Lifecycle Management is an application lifecycle management solution. A cross-site scripting vulnerability exists in the implementation of IBM Rational Quality Manager and IBM Rational...
PAN-OS cross-site scripting vulnerability (CNVD-2018-13464)
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the PAN-OS session browser in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability to inject arbitrary JavaScript...
PAN-OS cross-site scripting vulnerability (CNVD-2018-13468)
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the PAN-OS Web interface administration page in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability to inject...
CVE-2018-9337
The PAN-OS web interface administration page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.17 and earlier, PAN-OS 8.0.10 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML...
CVE-2018-9335
The PAN-OS session browser in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier, and PAN-OS 8.1.1 and earlier may allow an attacker to inject arbitrary JavaScript or HTML...