675 matches found
CVE-2013-6233
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."...
CVE-2013-6233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short document metadata."...
PT-2014-3070
Name of the Vulnerable Software and Affected Versions SpagoBI versions prior to 4.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the Description field in the "Short...
CVE-2013-5573
Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...
CVE-2013-5573
Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...
CVE-2013-5573
Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...
CVE-2013-5573: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration...
PT-2013-5651
Name of the Vulnerable Software and Affected Versions Jenkins version 1.523 Description A cross-site scripting XSS issue exists in the default markup formatter, allowing remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration. Recommendations Fo...
CVE-2013-6387
Cross-site scripting XSS vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field...
UBUNTU-CVE-2013-6387
Cross-site scripting XSS vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field...
CVE-2013-6387
Cross-site scripting XSS vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field...
CVE-2013-6387: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field...
PT-2013-6025
Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.24 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML via the description field in the Image module...
XSS vulnerability in JIRA description field
Using a link like: code https://x.x.com/x= please click here onmousemove=alert1 code shows a serious XSS vulnerability - using error correction in browsers Firefox 24 - in the JIRA description field and most likely every other wiki-style rendered field. Example: https://x.x.com/x= please click he...
XSS vulnerability in JIRA description field
Using a link like: code https://x.x.com/x= please click here onmousemove=alert1 code shows a serious XSS vulnerability - using error correction in browsers Firefox 24 - in the JIRA description field and most likely every other wiki-style rendered field. Example: https://x.x.com/x= please click he...
XSS vulnerability in JIRA description field
Using a link like: code https://x.x.com/x= please click here onmousemove=alert1 code shows a serious XSS vulnerability - using error correction in browsers Firefox 24 - in the JIRA description field and most likely every other wiki-style rendered field. Example: https://x.x.com/x= please click he...
CVE-2012-2169: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field...
CVE-2011-4346
CVE-2011-4346 corresponds to an XSS flaw in the web interface of Red Hat Network Satellite 5.4.1. An authenticated RHN Satellite user could inject arbitrary script/HTML via the Description field of the asset tag in a Custom Info page. The issue is documented across multiple sources (RHSA-2011:179...
PT-2011-4937 · Red Hat · Red Hat Network Satellite
Name of the Vulnerable Software and Affected Versions: Red Hat Network RHN Satellite version 5.4.1 Description: A cross-site scripting XSS issue exists in the web interface, allowing remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a...
CVE-2011-4346: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...