4857 matches found
PT-2014-6102
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0.0 through 6.1.0.6 IBM WebSphere Portal versions 6.1.5.0 through 6.1.5.3 IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 IBM WebSphere Portal version 8.0.0 before 8.0.0.1 CF13 IBM WebSphere Portal version...
PT-2014-1685
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2012 SP1 and 2014 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This could enable an attacker to spoof content, disclose...
Design/Logic Flaw
user.php in Cisco WebEx Meetings Server 1.5.1.131 and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708...
CVE-2014-3329
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
CVE-2014-3057
Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
Cross site scripting
Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3057
Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
PT-2014-5051
Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 8.0.0.1 CF12 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the Unified Task List UTL Portlet...
CVE-2014-3057: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3329: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
Cisco WebEx Meetings Server OutlookAction Class Vulnerability
A vulnerability in the OutlookAction Class of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL reques...
CVE-2014-4748
Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-4748
Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3071
Cross-site scripting XSS vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection...
CVE-2014-4748: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-3071: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection...
PT-2014-6093
Name of the Vulnerable Software and Affected Versions IBM Sametime versions 8.x through 8.5.2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. This affects the Classic Meeting Server component. Recommendatio...