PT-2019-11769 · Jenkins · Jenkins Pipeline: Build Step Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build Pipeline Plugin versions 1.5.8 and earlier Description: A stored cross-site scripting issue allows attackers who can edit the build pipeline description to inject arbitrary HTML and JavaScript into the plugin-provided web pages ...

The vulnerability of the Network Configuration Transfer tool, The Expedition Migration tool—which exists due to the lack of measures taken to protect the website structure—allows a hacker to inject arbitrary JavaScript or HTML code into the uploaded web page.

The vulnerability of the Network Configuration Transfer tool exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the uploaded web page...

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, allows attackers to inject arbitrary code into the web pages that are uploaded.

The vulnerability of SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web pages...

The vulnerability of the Wizard component in the microprogramming software of the RICOH Aficio MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH Aficio MP multifunctional device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

RICOH MP 2001 Cross-Site Scripting Vulnerability

The RICOH MP 2001 is a multifunction printer device from Ricoh Japan. A cross-site scripting vulnerability exists in the address add area of the RICOH MP 2001, which arises from the program failing to properly validate user-submitted input. An attacker can exploit the vulnerability by sending the...

ZOHO ManageEngine Desktop Central Cross-Site Scripting Vulnerability (CNVD-2018-19733)

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A cross-site scriptin...

IBM Rational Quality Manager HTML Injection Vulnerability (CNVD-2018-19534)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

Micro Focus NetIQ Access Manager Cross-Site Scripting Vulnerability

Micro Focus NetIQ Access Manager is a resource access control solution from Micro Focus UK. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users. A cross-site scripting vulnerability exists in the handling of ESP login parameters in...

CVE-2017-1278

IBM DOORS Next Generation DNG/RRC 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756...

CVE-2017-9360

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...

WN-AC1167GR Cross-Site Scripting Vulnerability

The WN-AC1167GR is a wireless LAN router device from I-O DATA DEVICE. A cross-site scripting vulnerability exists in the WN-AC1167GR 1.04 and earlier versions, which can be exploited by an attacker to inject script or HTML into an arbitrary web...

withinsecurity: Error Page Text Injection #106350

Hello Team , Description : This report is similar to 106350 , as we can see in report an user or attacker is able to inject his text into error page and can trap to user to visit other site by adding following link...

CVE-2014-2116

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2116

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2116: Improper Input Validation

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

Cisco Emergency Responder Dynamic Content Modification Vulnerability

A vulnerability in the web interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct web page injection attack against a user browser of the Cisco Emergency Responder. The vulnerability is due to insufficient input validation of several parameters. An...

Corporater EPM Suite is vulnerable to cross-site request forgery and cross-site scripting

Overview Corporater EPM Suite contains cross-site request forgery CSRF CWE-352 and reflected cross-site scripting XSS CWE-79 vulnerabilities. Description CWE-352: Cross-Site Request Forgery CSRF- CVE-2013-3583Corporater EPM Suite contains a cross-site request forgery vulnerability on the...

New Linux Rootkit Attacks Internet Users

Security researchers have discovered what appears to be an experimental Linux rootkit designed to infect its highly select victims during a classic drive-by website attack. The malware allows hackers to inject code directly in any infected web page. The new malware, discovered on November 13 of...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

SA-CONTRIB-2009-001 - Project release - Multiple vulnerabilities

Exploitable from: Remote Vulnerabilities: Arbitrary file upload, Cross-site scripting XSS The Project release module is a component within the broader Project module. This announcement covers the following two issues: 1. Project release enables file attachments to create a specific version of cod...