7973 matches found
CVE-2014-8012
Cross-site scripting XSS vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695...
Default credentials
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...
CVE-2014-9253
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to lib/exe/fetch.php...
PT-2014-8907
Name of the Vulnerable Software and Affected Versions DokuWiki versions prior to 2014-09-29b Description The issue allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file and then accessing it via the "media" parameter to "lib/exe/fetch.php". This is due to the...
CVE-2014-8247
Cross-site scripting XSS vulnerability in CA Release Automation formerly iTKO LISA Release Automation before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-8440
Name of the Vulnerable Software and Affected Versions CA Release Automation versions prior to 4.7.1 b448 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For versions prior to...
CVE-2014-6254
CVE-2014-6254 refers to multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core up to 5 Beta 3. The NVD description states that remote attackers could inject arbitrary web script or HTML via an attribute in a device name, device detail, report name, report detail, portlet name, or via ...
PT-2014-7120
Name of the Vulnerable Software and Affected Versions Zenoss Core versions through 5 Beta 3 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific attributes or strings, including those in device names, device details, report names, report details, portl...
CVE-2014-4633
Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-7265
Cross-site scripting XSS vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-7867
Name of the Vulnerable Software and Affected Versions ULTRAPOP.JP i-HTTPD affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability in the Omake BBS component. This allows remote attackers to inject arbitrary web script or HTML via a crafted...
PT-2014-6038
Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC Platform versions prior to 5.5.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...
PT-2014-6034
Name of the Vulnerable Software and Affected Versions EMC Isilon InsightIQ versions 2.x through 3.0 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6326...
CVE-2014-6326
Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability," a different vulnerability than CVE-2014-6325...
PT-2014-7100
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0 through 7.0.0.1 CF28 IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF14 IBM WebSphere...
Cross site scripting
Cross-site scripting XSS vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users with the "Edit path based meta tags" permission to inject arbitrary web script or HTML via vectors related to deleting a...
CVE-2014-8488
Cross-site scripting XSS vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality...
