PT-2018-12982

Name of the Vulnerable Software and Affected Versions IBM Rational Publishing Engine versions 6.0.5 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2018-10141: Improper Neutralization of Input During Web Page Generation

GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2018-20549)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2018-20548)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2018-20547)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

IBM Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability (CNVD-2018-20674)

IBM Rational Collaborative Lifecycle Management is a suite of collaborative design model management software from IBM in the United States. The software supports the use of centralized system repositories for storing, sharing, searching and managing design models, as well as automated software...

Cross-site Scripting (XSS)

coastercms is vulnerable to cross-site scripting XSS attacks. A malicious user can pass a POST request to the application to inject and execute arbitrary Javascript...

PT-2018-13367

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

Cross-Site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting. An attacker is able to inject arbitrary Javascript into a victim's browser via the titlesen parameter in core/admin/pages/add/ to steal session cookies or perform unwanted actions on behalf of the user...

PT-2018-13781

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13782

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

CVE-2017-1649: Improper Neutralization of Input During Web Page Generation

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2018-12255

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality an...

PT-2018-12304

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-12491

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13101

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.02 IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering...

PT-2018-1939

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.02 IBM Rational Quality Manager versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

Cross site scripting

Cross-site scripting XSS vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload...

CVE-2018-14037

Cross-site scripting XSS vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload...