CVE-2016-1437: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...

PT-2016-4787

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Deployment versions prior to 11.5.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via a crafted URL. This can be achieved by exploiting a SQL injection vulnerability in the...

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

PT-2016-4789

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise versions prior to 10.52 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendation...

CVE-2016-1437

SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

Design/Logic Flaw

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2016-1864

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2016-1864

CVE-2016-1864 affects WebKit’s XSS auditor used in Apple iOS before 9.3 and Safari before 9.1. The issue is that redirects are not properly handled when the auditor runs in block mode, allowing a crafted URL to leak sensitive information to remote attackers. This is a WebKit-level bug affecting h...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

Open redirect

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2016-1195

CVE-2016-1195 is an open redirect vulnerability in Cybozu Garoon 3.x and 4.x prior to 4.2.1. A crafted URL can redirect users to arbitrary sites, enabling phishing attempts. Affected product: Cybozu Garoon (3.x – 4.x up to 4.2.1). Root cause: open redirect handling in the application’s URL proces...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

PT-2016-4634

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.x and 4.x before 4.2.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. This can lead to unauthorized access to sensitive informatio...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

CVE-2016-1431: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-04104)

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...