2336 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...
CVE-2015-6535
Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...
Mozilla Firefox OS Cross-Site Scripting Vulnerability (CNVD-2015-05190)
Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, Gaia's Search application suffers from multiple cross-site scripting vulnerabilities in its implementation. These vulnerabilities can be exploited by remote attacker...
XChat 'Comman Name' Field SSL Certificate Security Bypass Vulnerability
X-Chat is a free and open source IRC client. A security vulnerability in the XChat 'Comman Name' field SSL certificate allows attackers to perform man-in-the-middle attacks or emulate a trusted server...
Ipswitch WhatsUp Gold Directory Traversal Vulnerability
Ipswitch WhatsUp Gold is a Windows-based network monitoring application. Ipswitch WhatsUp Gold suffers from a directory traversal vulnerability that could allow a remote attacker to read arbitrary files via an RRQ operation in the file name field...
UBUNTU-CVE-2014-9644
The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a parenthesized module template expression in the salgname field, as demonstrated by the vfataes expression, a different vulnerability than...
CVE-2014-8330
Cross-site scripting XSS vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account...
Cross site scripting
Cross-site scripting XSS vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account...
CVE-2014-8330
Cross-site scripting XSS vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account...
DEBIAN-CVE-2014-3577
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...
CVE-2014-5343
Cross-site scripting XSS vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field...
CVE-2014-5343
Cross-site scripting XSS vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field...
CVE-2014-4710
Cross-site scripting XSS vulnerability in zerouseraccount.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field...
Cross site scripting
Cross-site scripting XSS vulnerability in zerouseraccount.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field...
CVE-2014-4710
Cross-site scripting XSS vulnerability in zerouseraccount.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field...
CVE-2014-3491
Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...
ACS Blog 0.8/0.9/1.0/1.1 Name Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12921/info ACS Blog is affected by an HTML injection vulnerability. The issue affects the 'Name' field and may be exploited to execute arbitrary HTML and script code in the browser of the user when the user views an...
eFront 3.6.14.4 Cross Site Scripting
Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link: https://sourceforge.net/projects/efrontlearning/files/latest/download Version: 3.6.14.4 Tested on:...
CVE-2014-3840
Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...
CVE-2013-1421
Cross-site scripting XSS vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Category Name field to category.php...