3995 matches found
jquery-ui: XSS vulnerability in jQuery.ui.dialog title option
Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...
Multiple Cross-Site Scripting Vulnerabilities in PNMsoft Sequence Kinetics
PNMsoft Sequence Kinetics is a next-generation business process management suite released by Israel-based PNMsoft that enables rapid establishment of high-availability workflow applications and close human collaboration on change while maintaining lifecycle governance. Multiple cross-site scripti...
PT-2015-4938
Name of the Vulnerable Software and Affected Versions zencart-ja versions 1.3 jp through 1.3.0.2 jp8 zencart-ja versions 1.5 ja through 1.5.1 ja Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted parameter. This is related to the files...
CVE-2015-2088
Cross-site scripting XSS vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
IBM Tivoli Endpoint Manager Web Reports Component Cross-Site Scripting Vulnerability
IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. A cross-site scripting vulnerability in the Web Reports component of IBM Tivoli Endpoint Manager version 9.1.1229 prior to 9.1 can be exploited b...
McAfee Data Loss Prevention Endpoint Cross-Site Scripting Vulnerability
McAfee Data Loss Prevention Endpoint is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transfer, shared endpoint data flow control and data encryption. A...
Multiple Hitachi Products Online Help System Cross-Site Scripting Vulnerabilities
Hitachi Device Manager is a product of Hitachi, Japan. Hitachi Device Manager is a set of mobile device management software; Tiered Storage Manager is a set of tiered storage management software that can transparently migrate data between heterogeneous storage tiers; Replication Manager is a set ...
PT-2015-5362
Name of the Vulnerable Software and Affected Versions u5CMS versions prior to 3.9.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different PHP files. The affected parameters include c, i, l, p to index.php, a or b to...
Mrs. Shiromuku Perl CGI shiromuku(u1) GUESTBOOK Cross-Site Scripting Vulnerability
Mrs. Shiromuku Perl CGI shiromukuu1 GUESTBOOK is a message board software. A cross-site scripting vulnerability exists in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK version 1.62 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
EUVD-2015-1559
Multiple cross-site scripting XSS vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 horder, 2 jakcatid, 3 jakcontent, 4 jakcss, 5 jakdeletelog, 6 jakemail, 7 jakextfile, 8 jakfile, 9 jakhookshow, 10 jakimg, 11 jakjavascript, 12...
DEBIAN-CVE-2014-9649
Cross-site scripting XSS vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not properly handled in an error message...
CVE-2014-9649
Cross-site scripting XSS vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not properly handled in an error message...
Pivotal Software RabbitMQ management plugin cross-site scripting vulnerability
Pivotal Software RabbitMQ is a British company Pivotal Software's set of implementation of the Advanced Message Queuing Protocol AMQP open source messaging agent software. rabbitMQ management is one of the management plug-in . A cross-site scripting vulnerability exists in the Pivotal Software...
Wordpress plugin Joomlaskin JS Multi Hotel cross-site scripting vulnerability
WordPress is a blogging platform developed by WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Joomlaskin JS Multi Hotel plugin is a hotel management plugin. A cross-site scripting vulnerability in the Wordpress plug...
ProjectSend Cross-Site Scripting Vulnerability
ProjectSend is a use of php to achieve the management of the project to send , based on ftp project management aspects of php source code to achieve . ProjectSend has a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web script or HTML into the file upload...
Multiple Cross-Site Scripting Vulnerabilities in Cisco Secure Access Control Server (CNVD-2015-00230)
Cisco Secure ACS Access Control Server is a multifunction AAA authentication server. Multiple cross-site scripting vulnerabilities exist in Cisco Secure Access Control Server, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters...
WordPress Plugin Sodahead Polls Has Multiple Cross-Site Scripting Vulnerabilities
WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Sodahead Polls plugin is a plugin for polls. WordPress plugin Sodahead Polls suffers from multiple cross-site scripting vulnerabilities...
WordPress Plugin Relevanssi Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed using the PHP language, users can set up their own weblogs on servers that support PHP and MySQL databases.Relevanssi plugin is a WordPress search function enhancement plugin. A cross-site scripting vulnerability exists in WordPress plugin Relevanssi...
IPCop Cross-Site Scripting Vulnerability
IPCop is a Linux-based firewall suite developed by IPCop team, which is mainly for home and SOHO users, providing firewall functions and allowing monitoring and management of various information through some TCP/IP business rules. A cross-site scripting vulnerability exists in versions prior to...
WordPress PhotoSmash plugin cross-site scripting vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.PhotoSmash plugin is a plugin for adding photo albums. The WordPress PhotoSmash plugin has a cross-site scripting lea...