PT-2016-1960

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 before Update 19 Adobe ColdFusion versions 11 before Update 8 Adobe ColdFusion versions 2016 before Update 1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers...

CVE-2016-2350

Multiple cross-site scripting XSS vulnerabilities on the Accellion File Transfer Appliance FTA before FTA91240 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 getimageajax.php, 2 movepartitionframe.html, or 3 wmInfo.html...

CVE-2016-2010

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011...

Cross site scripting

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

Cross site scripting

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011...

CVE-2016-0900: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...

PT-2016-4455

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions prior to 8.1 SP1 P14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.1 SP1 P14...

PT-2016-4454

Name of the Vulnerable Software and Affected Versions EMC RSA Authentication Manager versions prior to 8.1 SP1 P14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.1 SP1 P14...

PT-2016-4960

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 10.01 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HPE Network Node...

CVE-2016-0892

Cross-site scripting XSS vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress DZS Videogallery Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress DZS Videogallery Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Instagram Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress Instagram Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Commentator Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress Commentator Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

PT-2016-4447

Name of the Vulnerable Software and Affected Versions EMC RSA Data Loss Prevention version 9.6 before SP2 P5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For EMC RSA Data Loss Prevention versio...

WordPress SP Projects and Document Manager Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress SP Projects and Document Manager Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

IBM WebSphere Application Server Liberty Code Injection Vulnerability (swg21978293)

IBM WebSphere Application Server Liberty is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3971

Cross-site scripting XSS vulnerability in lucenesearch.jsp in dotCMS before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to c/portal/layout...

CVE-2016-1652

Cross-site scripting XSS vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/modulesystem.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS...

CVE-2016-1652

Cross-site scripting XSS vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/modulesystem.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS...