4859 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability," a different vulnerability than CVE-2016-0031...
CVE-2016-0030
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...
CVE-2016-0031
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability," a different vulnerability than CVE-2016-0029...
CVE-2016-0029
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability," a different vulnerability than CVE-2016-0031...
CVE-2016-0032: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, 2013 Cumulative Update 11, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...
CVE-2016-0029: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability," a different vulnerability than CVE-2016-0031...
PT-2016-1039
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 Description The issue is related to a cross-site scripting XSS vulnerability in Outlook Web Access OWA that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This vulnerability...
CVE-2016-0030: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 PS1, 2013 Cumulative Update 10, and 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability."...
PT-2016-1040
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2013 PS1 through 2013 Cumulative Update 10 Microsoft Exchange Server version 2016 Description A cross-site scripting XSS issue exists due to inadequate protection of the web page structure in Outlook Web Acce...
PT-2016-1041
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 Description The issue is related to a cross-site scripting XSS vulnerability in Outlook Web Access OWA that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can be exploited ...
Cisco Unified Communications Manager SQL Injection Vulnerability
Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A security vulnerability exists in Cisco Unified Communications Manager 11.0 0.98000.225 that does not validate user input within a SQL query. An attacker sending a URL containing an SQL statement cou...
Sql injection
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
CVE-2015-6433
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
CVE-2015-6433: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
IBM Maximo Asset Management Cross-Site Scripting Vulnerability
IBM Maximo Asset Management is a suite of IT asset management solutions from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management. It allows an authenticated remote user to inject arbitrary web script or HTML code via a crafted URL...
IBM Curam Social Program Management Cross-Site Scripting Vulnerability
IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A cross-site scripting vulnerability exists in IBM Curam SPM version 6.1. A remote attacker can exploit this vulnerabili...
CVE-2015-5035
Cross-site scripting XSS vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5036...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5036...
CVE-2015-5035
IBM Connections is affected by a cross-site scripting (XSS) vulnerability (CVE-2015-5035) in 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3. The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The provided connected doc...