Code injection

The IP Manager Assistant IPMA component in Cisco Unified Communications Manager Unified CM allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352...

PT-2014-4541

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Description The issue allows remote attackers to obtain sensitive information via a crafted URL. Recommendations At the moment, there is no information about a newer version...

CVE-2014-0932

Cross-site scripting XSS vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3954

Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management versions 8.5 before HF105 IBM Sterling Selling and Fulfillment Foundation versions 9.0 before HF85 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or...

CVE-2014-2714

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

Code injection

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

CVE-2014-2714

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

CVE-2014-2714: Improper Input Validation

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

PT-2014-4879

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.4R15 Junos versions 11.4 prior to 11.4R9 Junos versions 12.1 prior to 12.1R7 Junos versions 12.1X44 prior to 12.1X44-D20 Junos versions 12.1X45 prior to 12.1X45-D10 Junos versions 12.1X46 prior to 12.1X46-D10...

CVE-2014-2128: Improper Authentication

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.47, 8.3 before 8.32.40, 8.4 before 8.47.3, 8.6 before 8.61.13, 9.0 before 9.03.8, and 9.1 before 9.13.2 allows remote attackers to bypass authentication via 1 a crafted cookie value within modified HTTP...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0827

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-0827: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Crlf injection

CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349...

CVE-2014-2137

CRLF injection vulnerability in the web framework in Cisco Web Security Appliance WSA 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002...

Cisco WSA HTTP Header Injection Vulnerability

A vulnerability in the web framework of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to inject a crafted HTTP header that could cause a web page redirection to a possible malicious website. The vulnerability is due to insufficient validation of user input befor...

Cisco Security Manager HTTP Header Redirection Vulnerability

A vulnerability in the web framework of Cisco Security Manager could allow an unauthenticated, remote attacker to inject a crafted HTTP header, which will cause a web page redirection to a possible malicious website. The vulnerability is due to insufficient validation of user input before using i...