16193 matches found
CVE-2016-5920
Cross-site scripting XSS vulnerability in the Web UI in IBM Financial Transaction Manager FTM for ACH Services 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...
CVE-2016-1423
The CVE-2016-1423 entry documents a vulnerability in Cisco AsyncOS for Cisco Email Security Appliance (ESA) affecting the Messages in Quarantine (MIQ) view. The issue arises from malformed HTML script tags in quarantined email messages, which could allow an unauthenticated remote attacker to caus...
CVE-2016-1423
A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...
CVE-2016-1592
XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI...
Code injection
XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages...
CVE-2016-1598
Affected software: NetIQ Identity Manager IDM 4.5 Identity Applications, prior to version 4.5.4. Vulnerability: Cross-site scripting (XSS) via the username field that allows an attacker to inject arbitrary HTML into the Role Assignment administrator HTML pages. Root cause (as described): the prog...
CVE-2016-1592
NetIQ Designer for Identity Manager is affected by CVE-2016-1592: an XSS vulnerability in the nrfEntitlementReport.do CGI allows remote attackers to inject arbitrary HTML code in pages rendered for Identity Manager, and affects versions prior to 4.5.3. The connected documents confirm the vulnerab...
Foreman HTML Injection Vulnerability (CNVD-2016-10271)
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An HTML injection vulnerability exists in Foreman, which arises from the program's failure to adequately...
Cloudera HUE HTML Injection Vulnerability
Cloudera Hue is an open source Apache Hadoop UI system from the U.S. company Cloudera. Cloudera HUE suffers from an HTML injection vulnerability. An attacker can exploit the vulnerability to steal cookie-based authentication and execute arbitrary HTML or script code...
Cloudera Manager has multiple vulnerabilities
Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager suffers from HTML injection and cross-site scripting vulnerabilities. An attacker exploiting the...
Cisco Email Security Appliance Quarantine Email Rendering Vulnerability
A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...
Cisco Email Security Appliance Quarantine Email Rendering Vulnerability
A vulnerability in the display of email messages in the Messages in Quarantine MIQ view in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a user to click a malicious link in the MIQ view. The malicious link could be used to facilitate...
Magento CMS Invitations Feature HTML Injection Vulnerability
Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. An HTML injection vulnerability exists in Magento CMS due to failure to adequately filter user input data. An attacker could exploit this vulnerability to execute arbitrary script...
[SECURITY] [DLA 673-1] kdepimlibs security update
Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...
Kmail HTML Injection Vulnerability
KMail is a mail client for KDE that supports protocols such as IMAP and POP3. An HTML injection vulnerability exists in Kmail, which can be exploited by an attacker to steal cookie-based authentication credentials...
PizzaInn Beta 3 Cross Site Scripting
Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - Stored XSS Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork :----------------...
openSUSE Security Update : kcoreaddons (openSUSE-2016-1200)
This update for kcoreaddons fixes the following issues : - CVE-2016-7966: HTML injection in plain text viewer boo1002977 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-1200. The...
