CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2789

CVE-2016-2789 is a cross-site scripting (XSS) vulnerability in the Web User Interface of Citrix XenMobile Server 10.x. The issue affects XenMobile Server 10.0, 10.1 (before Rolling Patch 4), and 10.3 (before Rolling Patch 1). An attacker could inject arbitrary web script or HTML via unspecified v...

PT-2016-5220

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.0, 10.1 through 10.1 before Rolling Patch 4, 10.3 through 10.3 before Rolling Patch 1 Description A cross-site scripting XSS issue exists in the Web User Interface of Citrix XenMobile Server, allowing remote...

CVE-2016-2789: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

spacewalk-java: Multiple XSS issues in WebUI

Multiple cross-site scripting XSS flaws were found in the way certain form data was handled in Red Hat Satellite. A user able to enter form data could use these flaws to perform XSS attacks against other Satellite users...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability in the packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java file of the Setup Wizard component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass security...

CVE-2009-2197

Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog...

CVE-2009-2197

CVE-2009-2197 affects Apple Safari prior to 9.1, where dialog text could be injected with page-supplied content, enabling UI spoofing. The official Apple advisory for Safari 9.1 states that the issue was addressed by removing inclusion of dialog text, mitigating the spoofing vector. The NVD entry...

CVE-2009-2197

Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog...

PT-2016-1605

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1 Description The issue is related to incorrect data handling. It may allow a remote attacker to substitute the user interface by using a web page that places text in a crafted context, leading to unintended us...

Apple Safari Interface Forgery Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 9.1. An attacker can exploit the vulnerability to spoof the user interface with the help of a...

CVE-2009-2197: Undefined Security Weakness

Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog...

Drupal Prepopulate module security bypass vulnerability (CNVD-2016-01737)

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. prepopulate is one of the prepopulated field modules. A security vulnerability exists in Drupal Prepopulate due to the program's failure to restrict users from overriding any portion o...

The vulnerability of the application interface of IBM WebSphere Portal servers allows attackers to redirect users to arbitrary websites.

The vulnerability of the IBM WebSphere Portal application’s user interface is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry out phishing attacks using specially crafted URLs...

KLA10765 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, gain privileges and write local files. Below...

UBUNTU-CVE-2016-1640

The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the...

PT-2016-1320

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0.x before 8.0.0.1 CF20 IBM WebSphere Portal versions 8.5.x before 8.5.0.0 CF09 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted...

PT-2016-1321

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.x through 7.0.0.2 CF29 IBM WebSphere Portal versions 8.0.x before 8.0.0.1 CF20 IBM WebSphere Portal versions 8.5.x before 8.5.0.0 CF09 Description The issue is related to insufficient access control in the user...

Cisco IOS XE Multiple OpenSSL Vulnerabilities (CSCup22487)

The remote Cisco IOS XE device is missing a vendor-supplied security patch, and its web user interface is configured to use HTTPS. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - An error exists in the ssl3readbytes function that could allow data to ...