BlackBerry Enterprise Service Cross-Site Scripting Vulnerability (CNVD-2016-02335)

BlackBerry Enterprise Server is a wireless solution. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A cross-site scripting vulnerability exists in BlackBerry Enterprise Server, which allows remote attackers to...

CVE-2016-2076

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...

CVE-2016-2076

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...

UBUNTU-CVE-2016-3168

The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."...

IBM WebSphere Application Server Session Hijack Vulnerability (Apr 2016)

IBM WebSphere Application Server is prone to session hijack vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

The Cisco IP Interoperability and Collaboration System is a set of solutions that provide voice interoperability across different systems based on IP standards. A cross-site scripting vulnerability exists in the Cisco IP Interoperability and Collaboration System, which can be exploited by remote...

Recruit plugin cross-site request forgery vulnerability

Recruit plugin for baserCMS is a job listing plugin for baserCMS. A cross-site request forgery vulnerability exists in Recruit plugin for baserCMS versions prior to 0.9.3, which allows remote attackers to hijack administrars authentication...

Websvn Cross-Site Scripting Vulnerability

WebSVN is a set of web-based Subversion Repository browsers that allow you to view logs of files or folders, see a list of changes to files, add or remove arbitrary version numbers, and more. A cross-site scripting vulnerability exists in WebSVN, which allows remote attackers to exploit the...

Yeager Cross-Site Scripting Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...

Apache Tomcat Session Fixation Vulnerability (CNVD-2016-01381)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat has a security vulnerability in the implementation of the requestedSessionSSL field, which can be exploited by an attacker to hijack an arbitrary session and gain access to the affected application...

Enhancesoft osTicket Session Fixation Vulnerability

Enhancesoft osTicket is a free and lightweight PHP-based question return system from Enhancesoft, USA. The system supports e-mail queries and more. A session fixation vulnerability exists in Enhancesoft osTicket. An attacker can vulnerability hijack a session to perform unauthorized access...

Cisco Jabber Guest Server HTTP HOST Parameter Cross-Site Scripting Vulnerability

Cisco Jabber Guest is a consumer-to-business C2B solution. A cross-site scripting vulnerability in Cisco Jabber Guest's handling of the HTTP HOST parameter allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Ipswitch MOVEit Mobile Cross-Site Scripting Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. A cross-site scripting vulnerability exists in Ipswitch MOVEit Mobile, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-00891)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site scripting vulnerability exists in phpMyAdmin, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Mapbox Mapbox.js HTML Injection Vulnerability

Mapbox Mapbox.js is a JavaScript plugin for quickly creating maps. An HTML injection vulnerability exists in Mapbox Mapbox.js, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...