CVE-2012-6575

Cross-site scripting XSS vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2029

Name of the Vulnerable Software and Affected Versions Drupal Exposed Filter Data module versions 6.x-1.x through 6.x-1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 6.x-1.x through 6.x-1.1, update to...

PT-2013-2028

Name of the Vulnerable Software and Affected Versions Fonecta verify module versions 7.x-1.x through 7.x-1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 7.x-1.x through...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

PT-2013-4353

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management on Security Management Appliance SMA devices affected versions not specified Description A cross-site scripting XSS issue exists in the web framework of Cisco Content Security Management on Security Management...

CVE-2013-1971

Cross-site scripting XSS vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file...

CVE-2013-2129

The CVE-2013-2129 issue affects the Drupal Webform module (6.x-3.x) prior to 6.x-3.19. It is a Cross-site Scripting (XSS) vulnerability whereby remote authenticated users with the "edit own webform content" or "edit all webform content" permissions can inject arbitrary web script or HTML via a co...

CVE-2013-0548

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-3128

Name of the Vulnerable Software and Affected Versions Drupal CurvyCorners module versions 6.x-1.x through 7.x-1.x Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the administer curvycorners permission to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management ZCM 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event...

Cross site scripting

Cross-site scripting XSS vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels...

CVE-2012-6564

Cross-site scripting XSS vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5094

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 5.1.0 Description The issue involves multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are related to unspecified vectors involvin...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Server: Multiple XSS vulnerabilities

Cross-site scripting XSS vulnerabilities in js/viewer.js inside the filesvideoviewer application via multiple unspecified vectors in all ownCloud versions prior to 5.0.7 and 4.5.12 allows authenticated remote attackers to inject arbitrary web script or HTML via shared files. CVE-2013-2150...

PT-2014-2271

Name of the Vulnerable Software and Affected Versions GeSHi versions prior to 1.0.8.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.0.8.11, update to version 1.0.8.11 or later to resolve the...

CVE-2013-1247

Cross-site scripting XSS vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to inject arbitrary web script or HTML via an SSID that is not properly handled during display of the XML windowing table, aka Bug ID CSCuf04356...