CVE-2014-8076

Cross-site scripting XSS vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to custom copyright information...

PT-2014-6258

Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue allows remote authenticated users with console access to inject arbitrary web script or HTML. This can be achieved through various means, including a Graph Tree Title in a delete or edit action, CDEF...

Cross site scripting

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6631

CVE-2014-6631 is a Joomla! core XSS vulnerability in the com_media component. The issue affects Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is inadequate escaping in the affected compon...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skiplinktext setting and unspecified...

PT-2014-8354

Name of the Vulnerable Software and Affected Versions Joomla! CMS versions 2.5.x through 2.5.18 Joomla! CMS versions 3.x through 3.2.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Joomla! C...

PT-2014-7312

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.2.x through 3.2.4 Joomla! versions 3.3.x through 3.3.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Joomla! versions...

Cross site scripting

Cross-site scripting XSS vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter...

CVE-2014-4871

Cross-site scripting XSS vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via the wlWpaPsk parameter...

CVE-2014-7869

Cross-site scripting XSS vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2644

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

PT-2014-4848

Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP Systems Insight Manager SIM versions prior to 7.4, update ...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6296

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7029

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.x before 7.0.0-ISS-WGA-IF0009 IBM Security Access Manager for Web versions 8.x before 8.0.0-ISS-WGA-FP0005 IBM Security Access Manager for Mobile versions 8.x before 8.0.0-ISS-ISAM-FP0005...

PT-2014-7140

Name of the Vulnerable Software and Affected Versions TYPO3 extension wec map versions prior to 3.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.0.3, update to version 3.0.3 or later to resol...

PT-2014-7138

Name of the Vulnerable Software and Affected Versions TYPO3 External links click statistics outstats extension version 0.0.3 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For version...

PT-2014-7141

Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.9.3, update to version 1.9.3 or later to...

PT-2014-7135

Name of the Vulnerable Software and Affected Versions TYPO3 Alphabetic Sitemap alpha sitemap extension versions 0.0.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieve...