16138 matches found
Nagios Core <= 4.4.2 XSS Vulnerability
Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified checkload plugin to NRPE. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Micro Focus NetIQ iManager Cross-Site Scripting Vulnerability
Micro Focus NetIQ iManager is a WEB-based application from Micro Focus UK. The program can manage, configure eDirectory objects using wireless devices. A cross-site scripting vulnerability exists in Micro Focus NetIQ iManager versions prior to 3.1 SP2, which can be exploited by remote attackers t...
IBM Curam Social Program Management HTML Injection Vulnerability
IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM in the United States. The solution supports the end-to-end social program delivery process.Social Program Management Design System is one of the Social Program Management Design System components. A...
CVE-2018-16636
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...
CVE-2018-16636
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...
Design/Logic Flaw
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...
CVE-2018-16636
CVE-2018-16636 affects Nucleus CMS 3.70, where an HTML injection vulnerability exists in the index.php body parameter. The root cause is improper handling of input leading to HTML injection, enabling an attacker to inject HTML into pages. The connected documents confirm the vulnerability’s existe...
CVE-2018-16636
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...
CVE-2018-1671
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951...
CVE-2018-1671
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951...
Design/Logic Flaw
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951...
CVE-2018-1671
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951...
CVE-2018-1671
CVE-2018-1671 affects IBM Curam Social Program Management 7.0.3, via the Social Program Management Design System HTML injection vulnerability. The Design System component (versions prior to 1.4.0) allows remote HTML injection executed in the victim’s browser within the hosting site’s security con...
CVE-2018-19922
Persistent Cross-Site Scripting XSS in the advancedsetupwebsiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd...
Cross site scripting
Persistent Cross-Site Scripting XSS in the advancedsetupwebsiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd...
CVE-2018-19922
Persistent Cross-Site Scripting XSS in the advancedsetupwebsiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd...
Security Bulletin: IBM Social Program Management Design System contains an HTML injection vulnerability (CVE-2018-1671)
Summary An HTML injection vulnerability was detected in the IBM Social Program Management Design System component of the IBM Cúram Social Program Management product. It was discovered that input data for some tags was not sanitized in a secure way. Vulnerability Details CVEID: CVE-2018-1671...
Cross site scripting
Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...