CVE-2016-2274: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

CVE-2016-9371: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2017-5960: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML...

CVE-2017-3300: Improper Neutralization of Input During Web Page Generation

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Multichannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-6854: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwant...

CVE-2014-3187: Improper Neutralization of Input During Web Page Generation

Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...

CVE-2012-4547: Improper Neutralization of Input During Web Page Generation

Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors...

CVE-2007-0995: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions...