CVE-2015-4657

Cross-site scripting XSS vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted URL...

CVE-2015-4657: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted URL...

PT-2015-6657

Name of the Vulnerable Software and Affected Versions Mailbird versions 2.0.16.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an e-mail message body. Recommendations For Mailbird versions 2.0.16.0 and...

CVE-2015-4351: Undefined Security Weakness

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL...

CVE-2015-0774

Cross-site scripting XSS vulnerability in Cisco Application and Content Networking System ACNS 5.59 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650...

CVE-2015-0774

The CVE-2015-0774 entry covers a Cross-site Scripting (XSS) vulnerability in Cisco’s Application and Content Networking System (ACNS) version 5.5(9), tracked as Bug CSCuu70650. The issue allows an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted URL. Public detail...

CVE-2015-0774: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Application and Content Networking System ACNS 5.59 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650...

PT-2015-4875

Name of the Vulnerable Software and Affected Versions Cisco Application and Content Networking System ACNS version 5.59 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco Application and Content...

PT-2015-1604

Name of the Vulnerable Software and Affected Versions Cisco TelePresence TC versions 6.x through 6.3.3 Cisco TelePresence TC versions 7.x through 7.3.2 Description The issue is related to a CRLF injection vulnerability that exists due to insufficient input validation. This allows remote attackers...

IBM Cognos Business Intelligence Open Redirect Vulnerability

IBM Cognos is an integrated business intelligence BI and planning solution. A security vulnerability exists in IBM Cognos Business Intelligence. The vulnerability is allowed to be exploited by an attacker to redirect users to kongz-controlled sites via a crafted URL and conduct phishing attacks...

CVE-2015-0763

Cisco Unified MeetingPlace 8.61.2 does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338...

PT-2015-4867

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace versions 8.61.2 through 8.61.9 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted value in a URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition WLE 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL th...

PT-2015-1615

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 7.5.x through 7.5.1.2 IBM Business Process Manager versions 8.0.x through 8.0.1.3 IBM Business Process Manager versions 8.5.x through 8.5.5.0 WebSphere Lombardi Edition versions 7.2.x through 7.2.0.5...

CVE-2015-0193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition WLE 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL th...

CVE-2015-0752

Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...

CVE-2015-0752: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...

CVE-2014-6192

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition WLE 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...