CVE-2014-8667: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 default URI to admin.php or the 2 id parameter to admin.php or 3 go.php...

CVE-2014-3475

CVE-2014-3475 is an XSS issue in the OpenStack Horizon Users panel (admin/users/). Affected software: OpenStack Horizon before 2013.2.4, OpenStack Horizon 2014.1 before 2014.1.2, and Horizon in the Juno series before Juno-2. Root cause: cross-site scripting via a user email address allows injecti...

CVE-2014-3475

Cross-site scripting XSS vulnerability in the Users panel admin/users/ in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than...

CVE-2014-2336

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 dataContacttitle parameter to admin/contacts/contacts/add page; 2 dataBlocktitle or 3 dataBlockalias parameter to admin/blocks/blocks/edit page; 4...

CVE-2014-2336

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335...

CVE-2014-2335

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336...

CVE-2014-3375

Multiple cross-site scripting XSS vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCup92550...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the CCM admin interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90582...

CVE-2014-3375

Multiple cross-site scripting XSS vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90597...

PT-2014-5262

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM reports interface of the Server in Cisco Unified Communications Manager. These...

PT-2014-7046

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM Advanced versions 7.5 through 8.5.5 Description A cross-site scripting XSS issue exists in the redirect-login feature, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2014-8626

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 2.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including dataContacttitle to the "admin/contacts/contacts/add" page,...

PT-2014-5264

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the CCM admin interface of the Server in Cisco Unified Communications Manager. These...

CVE-2014-3372: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the CCM reports interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq90589...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...