19969 matches found
CVE-2016-3010
CVE-2016-3010 is a cross-site scripting (XSS) vulnerability affecting IBM Connections Web UI. The issue spans IBM Connections versions 4.0–CR4, 4.5–CR5, 5.0 before CR4, and 5.5 before CR1, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The desc...
CVE-2016-3005
The CVE-2016-3005 entry describes a Cross-site scripting (XSS) vulnerability in the Web UI of IBM Connections across several versions: 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspe...
CVE-2016-3008
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...
CVE-2016-3008
CVE-2016-3008 is an XSS vulnerability in IBM Connections Web UI (5.0 before CR4, 5.5 before CR1) allowing remote authenticated users to inject arbitrary scripts via unspecified vectors. The connected sources do not provide explicit exploit details, patch versions, or confirmed in-the-wild exploit...
CVE-2016-2995
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-300...
CVE-2016-0370
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
Code injection
NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
CVE-2016-0370
Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an application that was built with this product...
CVE-2016-3064
NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...
PT-2016-6410 · Red Hat +2 · Freeipa +3
Name of the Vulnerable Software and Affected Versions: FreeIPA affected versions not specified Description: The issue concerns the cert revoke command in FreeIPA, which fails to check for the revoke certificate permission. This allows remote authenticated users to revoke arbitrary certificates by...
Command injection
cgi-bin/cgimain in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transferlicense command...
CVE-2016-7119
Cross-site scripting XSS vulnerability in the user-profile biography section in DotNetNuke DNN before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element...
Cross site scripting
Cross-site scripting XSS vulnerability in the user-profile biography section in DotNetNuke DNN before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element...
CVE-2016-7119
Cross-site scripting XSS vulnerability in the user-profile biography section in DotNetNuke DNN before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element...
postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference
A flaw was found in the way PostgreSQL server handled certain SQL statements containing CASE/WHEN commands. A remote, authenticated attacker could use a specially crafted SQL statement to cause PostgreSQL to crash or disclose a few bytes of server memory or possibly execute arbitrary code...
CVE-2015-5399
Cross-site scripting XSS vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment...
Cross site scripting
Cross-site scripting XSS vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment...