IBM Rational Team Concert HTML Injection Vulnerability

IBM Rational Team Concert is a software lifecycle management solution based on the Jazz platform and supports decentralized teams to collaborate in real time. An HTML injection vulnerability exists in IBM Rational Team Concert, which can be exploited by remote attackers to inject malicious script...

Cross-Site Scripting Vulnerability in Multiple Huawei Products

Huawei PLK PLK-AL10C00B211 is a smartphone product from Huawei, China. A cross-site scripting vulnerability exists in the Email application of multiple Huawei PLK PLK-AL10C00B211 products, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which ca...

WebSVN cross-site scripting vulnerability (CNVD-2016-02878)

WebSVN is a set of Web-based Subversion Repository browser. A cross-site scripting vulnerability in WebSVN's handling of directory names or filenames allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Netgear Router Cross-Site Scripting Vulnerability

The NETGEAR Router is the router device. A cross-site scripting vulnerability exists in Netgear Router Firmware version 1.0.0.24. An attacker is able to steal a cookie to intercept the session of a logged in user...

BlackBerry Enterprise Service Cross-Site Scripting Vulnerability (CNVD-2016-02336)

BlackBerry Enterprise Server is a wireless solution. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A cross-site scripting vulnerability exists in BlackBerry Enterprise Server, which allows remote attackers to...

BlackBerry Enterprise Service Cross-Site Scripting Vulnerability (CNVD-2016-02335)

BlackBerry Enterprise Server is a wireless solution. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A cross-site scripting vulnerability exists in BlackBerry Enterprise Server, which allows remote attackers to...

Apache Struts Oracle JRE Cross-Site Scripting Vulnerability

Apache Struts is the United States an open source framework for creating enterprise Java Web applications.Oracle JRE is a set of environments for running Java applications. A cross-site scripting vulnerability exists in the 'URLDecoder' function of the Oracle JRE used by Apache Struts, which allo...

CVE-2016-2076

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...

CVE-2016-2076

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...

UBUNTU-CVE-2016-3168

The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."...

IBM WebSphere Application Server Session Hijack Vulnerability (Apr 2016)

IBM WebSphere Application Server is prone to session hijack vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

The Cisco IP Interoperability and Collaboration System is a set of solutions that provide voice interoperability across different systems based on IP standards. A cross-site scripting vulnerability exists in the Cisco IP Interoperability and Collaboration System, which can be exploited by remote...

Recruit plugin cross-site request forgery vulnerability

Recruit plugin for baserCMS is a job listing plugin for baserCMS. A cross-site request forgery vulnerability exists in Recruit plugin for baserCMS versions prior to 0.9.3, which allows remote attackers to hijack administrars authentication...

Yeager Cross-Site Scripting Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...

Websvn Cross-Site Scripting Vulnerability

WebSVN is a set of web-based Subversion Repository browsers that allow you to view logs of files or folders, see a list of changes to files, add or remove arbitrary version numbers, and more. A cross-site scripting vulnerability exists in WebSVN, which allows remote attackers to exploit the...

Apache Tomcat Session Fixation Vulnerability (CNVD-2016-01381)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat has a security vulnerability in the implementation of the requestedSessionSSL field, which can be exploited by an attacker to hijack an arbitrary session and gain access to the affected application...

Enhancesoft osTicket Session Fixation Vulnerability

Enhancesoft osTicket is a free and lightweight PHP-based question return system from Enhancesoft, USA. The system supports e-mail queries and more. A session fixation vulnerability exists in Enhancesoft osTicket. An attacker can vulnerability hijack a session to perform unauthorized access...

Cisco Jabber Guest Server HTTP HOST Parameter Cross-Site Scripting Vulnerability

Cisco Jabber Guest is a consumer-to-business C2B solution. A cross-site scripting vulnerability in Cisco Jabber Guest's handling of the HTTP HOST parameter allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

Ipswitch MOVEit Mobile Cross-Site Scripting Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. A cross-site scripting vulnerability exists in Ipswitch MOVEit Mobile, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...