CVE-2016-4848

Cross-site scripting XSS vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4851: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-6178

Name of the Vulnerable Software and Affected Versions Let's PHP! simple chat versions prior to 2016-08-15 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions...

PT-2016-6177

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 2.8.1 RC2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.8.1 RC2, update to version 2.8.1 RC2 or later to resolv...

PT-2016-6655

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting XSS vulnerabilities. Recommendations For...

CVE-2015-5399

CVE-2015-5399 affects PHPVibe, a PHPCMS, where versions before 4.21 are vulnerable to a stored XSS in comments. The root cause is untrusted user input being accepted in comments and then rendered, allowing remote authenticated users to inject arbitrary script/HTML. Public references describe the ...

CVE-2016-1476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024...

CVE-2016-6359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

CVE-2016-6320

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

CVE-2016-3089

Cross-site scripting XSS vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

Cross site scripting

Cross-site scripting XSS vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in app/helpers/formhelper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter...

CVE-2016-0280

CVE-2016-0280 is an XSS vulnerability affecting IBM InfoSphere Information Server Framework, Information Governance Catalog, and Business Glossary across multiple versions (ISF 8.5, IGC 11.3/11.5, BI Glossary 8.7/9.1, Framework 8.7/9.1/11.3/11.5). The root cause is improper validation of user-sup...

CVE-2016-2925: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-6634: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SOGo Cross-Site Scripting Vulnerability

SOGo is an extensible, modern collaboration suite that offers features such as management of calendars and address books, and full-featured Web mail client resource sharing. A cross-site scripting vulnerability exists in SOGo version 3.0.2 of calendar. A remote attacker can exploit this...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Red Hat Spacewalk Monitoring Cross-Site Scripting Vulnerability

Red Hat Spacewalk is an open source Linux system management solution from Red Hat, and Spacewalk Monitoring is one of the configuration tools. A cross-site scripting vulnerability exists in Red Hat Spacewalk Monitoring, which can be exploited by an attacker to inject arbitrary web script or HTML...

CVE-2016-1447

Cross-site scripting XSS vulnerability in the administrator interface in Cisco WebEx Meetings Server 2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuy83194...