CVE-2015-5326: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message...

User or Group Page Security

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-31505. panel Option to give user or group access to a particular page with a selectable option on the particular page rather th...

Code injection

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

PT-2012-3363

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.14 Description The issue allows remote authenticated users to obtain sensitive information, such as the post title, via the forum overview page due to improper checking of user permissions for unpublished forum posts...

CVE-2012-2975: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page...

PT-2012-4407

Name of the Vulnerable Software and Affected Versions F5 ASM appliance versions 10.0.0 through 11.2.0 HF2 Description A cross-site scripting XSS issue exists in the traffic overview page, allowing remote attackers to inject arbitrary web script or HTML via crafted requests that are later listed o...