PT-2016-4636

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 4.2.1, update to version 4.2.1 or...

PT-2016-2275

Name of the Vulnerable Software and Affected Versions Trend Micro Internet Security versions 8 through 10 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is due to a lack of protection measures...

PT-2016-3831

Name of the Vulnerable Software and Affected Versions Cybozu Garoon version 4.0.3 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Cybozu Garoon version 4.0.3, update to a version tha...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5860

Name of the Vulnerable Software and Affected Versions Adobe Brackets versions prior to 1.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.7, update to version 1.7 or later to resolve the issue...

CVE-2016-4164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-4654

Name of the Vulnerable Software and Affected Versions HumHub versions 0.20.0-beta.1 through 0.20.1 HumHub versions 1.0.0-beta before 1.0.0-beta.3 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4812

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4812: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-4646

Name of the Vulnerable Software and Affected Versions Epoch Web Mailing List versions 0.31 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to the execution of...

PT-2016-6156

Name of the Vulnerable Software and Affected Versions Markdown on Save Improved plugin versions prior to 2.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.5.1, update to version 2.5.1 or later...

Cross site scripting

Cross-site scripting XSS vulnerability in vpn/js/gatewayloginformview.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSCTMAC cookie...

WordPress CSV Import Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress CSV Import Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress WP Advanced Importer Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress WP Advanced Importer Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

CVE-2015-7360

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

Cross site scripting

Cross-site scripting XSS vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified...

Cross site scripting

Cross-site scripting XSS vulnerability in the administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

VMware vCenter Server Cross-Site Scripting Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A cross-site scripting vulnerability exists ...