Junos Space Network Management Platform Event Viewer Syslog Communication Log Messages Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. A cross-site scripting vulnerability in the Junos Space Network Management Platform's handling of special syslog communication log messages could be exploited by remote attackers to inject malicious script or HTML...

Junos Space Network Management Platform Network Monitoring Tool Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. The Junos Space Network Management Platform network monitoring tool fails to properly handle SNMP TRAP, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTML code that can be used...

Wing FTP Server Admin /admin_viewstatus.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . A cross-site scripting vulnerability exists in Wing FTP Server Admin /adminviewstatus.html, which allows remote attackers to exploit the vulnerability to inject...

Wing FTP Server Admin /admin_loglist.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /adminloglist.html domain parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

Wing FTP Server Admin /admin_event_list.html type Cross Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /admineventlist.html type parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

Junos Space Network Management Platform SSL Certificate Handling Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. A cross-site scripting vulnerability exists in Junos Space Network Management Platform SSL certificate processing, which can be exploited by remote attackers to inject malicious script or HTML code that can be used...

Drupal MailChimp Module Cross-Site Scripting Vulnerability

MailChimp Module for Drupal is a module application for Drupal. MailChimp Module for Drupal suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Finesse Server

Cisco Finesse Server is an agent and management desktop developed by Cisco. Cisco Finesse Server has multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...

EasyCTF Cross-Site Scripting Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF suffers from an unspecified cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or HTML code, which could be used to gain access to sensitive information or hijack user sessions when malicious...

IBM Sterling Order Management Cross-Site Scripting Vulnerability (CNVD-2015-02756)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A cross-site scripting vulnerability exists in IBM Sterling Order Management for...

Tilde Ember.js Cross-Site Scripting Vulnerability

Tilde Ember.js is a set of JavaScript frameworks for creating web applications. Tilde Ember.js suffers from a cross-site scripting vulnerability due to the failure of the program's view "select" option's optionLabelPath property to adequately filter user-submitted input, which allows remote...

TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2015-02626)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A cross-site scripting vulnerability exists in the filter search form in the Cisco Adaptive Security Appliance web management page, which allows remote attackers to exploit...

Cisco TelePresence Collaboration Desk and Room Endpoints TC Software Cross-Site Scripting Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A cross-site scripting vulnerability exists in the login page of Cisco TC Software versions prior to 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints appliances, which allows remote attackers to exploi...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.actio has multiple cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. The Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script handles a cross-site scripting vulnerability in workflowMarkup that can be exploited by a remote attacker to construct a malicious URI, which induces the user to parse it,...

Multiple Cross-Site Scripting Vulnerabilities in Comala Workflows saveproperties.action

Comala Workflows is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in the Comala Workflows saveproperties.action script, which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to obtain a sensitive...

Comala Workflows newtask.action taskName has multiple reflected cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. Comala Workflows newtask.action script handles A cross-site scripting vulnerability exists in taskName, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pent...