IBM Maximo Asset Management Cross-Site Scripting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A cross-site scripting vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

Nokia Solutions And Networks Cross-Site Scripting Vulnerability

Nokia Solutions and Networks is a suite of solutions to help mobile networks run multiple services. A cross-site scripting vulnerability exists in Nokia Solutions And Networks, which could be exploited by remote attackers to inject malicious script or HTML code that, when viewed with malicious...

Symantec Web Gateway Cross-Site Scripting Vulnerability (CNVD-2015-06067)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A cross-site scripting vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Aol account hijack sessions 0day

hijacking sessions replaying information, to gain access to other account details. Usage Info you will need firefox live http headers FIXED for replay and the method below. This is private exploit. You can buy it at https://0day.today...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...

Drupal Ctools Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. ctools is one of the API modules used to improve the development experience. A cross-site scripting vulnerability exists in the Drupal Ctools module, which allows remote attackers to exploit the vulnerability to inject...

Splunk Enterprise and Splunk Light Dashboard Cross-Site Scripting Vulnerability

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Dashboard for Splunk Enterprise and Splunk...

NAP Turbo NAS Series Devices 'Edit Account Profile' Cross-Site Scripting Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in the "Edit Account Profile" page of NAP Turbo NAS Series Devices, which can be exploited by remote attackers to inject malicious...

IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05520 )

The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...

IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05521)

The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...

WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05156)

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Red Hat JBoss Operations Network HTTP Error Page Cross-Site Scripting Vulnerability

JBoss Operations Network is open source network management software based on Java EE. An input validation vulnerability in the JBoss Operations Network HTTP error page allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. Th...

WordPress Plotly Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up personal blog site . Plotly is one of the plugin to the Wordpress site embedded Plotly charts . An HTML injection vulnerability exists ...

Google Chrome Generic Cross-Site Scripting Vulnerability

Google Chrome is an open source WEB browser. A cross-site scripting vulnerability in Google Chrome org/chromium/chrome/browser/UrlUtilities.java on Android allows attackers to build malicious WEB pages that can be parsed by tricking a user into parsing them, which can obtain sensitive information...

Novell GroupWise Input Validation Cross-Site Scripting Vulnerability

Novell GroupWise is a cross-platform collaboration software. An input validation cross-site scripting vulnerability exists in Novell GroupWise, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack use...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT System Software

The Cisco FireSIGHT Management Center centrally manages the network security and operational functions of Cisco ASA and Cisco FirePOWER Network Security Appliances with FirePOWER Services. A cross-site scripting vulnerability exists in Cisco FireSIGHT, which allows remote attackers to exploit the...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager (CNVD-2015-04702)

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can ...

Cacti cross-site scripting vulnerability (CNVD-2015-04695)

Cacti is a set of open source network traffic monitoring and analysis tools. A cross-site scripting vulnerability exists in Cacti's settings.php script, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...

IBM Case Manager Cross-Site Scripting Vulnerability

IBM Case Manager is a solution for managing cases. The solution supports the combination of content, processes and people, and provides frameworks, relevance methods and integration tools to view a holistic view of cases. A cross-site scripting vulnerability exists in IBM Case Manager, which allo...