Cross site scripting

Cross-site scripting XSS vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web script or HTML via vectors related to policies...

ownCloud Stored XSS Vulnerability (oC-SA-2015-010) - Linux

ownCloud is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EMC ViPR SRM Cross-Site Scripting Vulnerability (CNVD-2016-07740)

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-6643

Cross-site scripting XSS vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5148

CVE-2016-5148 is a cross-site scripting vulnerability in the Blink rendering engine used by Google Chrome. It could allow an attacker to execute arbitrary web script via widget-update related vectors (UXSS). Affected: Chrome on Windows and macOS prior to 53.0.2785.89; Linux prior to 53.0.2785.92....

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

CVE-2015-5720

Malware Information Sharing Platform (MISP) versions prior to 2.3.90 expose multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature. Attack vectors involve add.ctp, edit.ctp, and ajaxification.js, enabling remote attackers to inject arbitrary web script or HTML. The p...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5399

CVE-2015-5399 affects PHPVibe, a PHPCMS, where versions before 4.21 are vulnerable to a stored XSS in comments. The root cause is untrusted user input being accepted in comments and then rendered, allowing remote authenticated users to inject arbitrary script/HTML. Public references describe the ...

CVE-2016-6320

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

CVE-2016-0280

CVE-2016-0280 is an XSS vulnerability affecting IBM InfoSphere Information Server Framework, Information Governance Catalog, and Business Glossary across multiple versions (ISF 8.5, IGC 11.3/11.5, BI Glossary 8.7/9.1, Framework 8.7/9.1/11.3/11.5). The root cause is improper validation of user-sup...

SOGo Cross-Site Scripting Vulnerability

SOGo is an extensible, modern collaboration suite that offers features such as management of calendars and address books, and full-featured Web mail client resource sharing. A cross-site scripting vulnerability exists in SOGo version 3.0.2 of calendar. A remote attacker can exploit this...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Red Hat Spacewalk Monitoring Cross-Site Scripting Vulnerability

Red Hat Spacewalk is an open source Linux system management solution from Red Hat, and Spacewalk Monitoring is one of the configuration tools. A cross-site scripting vulnerability exists in Red Hat Spacewalk Monitoring, which can be exploited by an attacker to inject arbitrary web script or HTML...