PT-2016-3827

Name of the Vulnerable Software and Affected Versions Secure Data Space SDS-API versions prior to 3.5.7 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved through the "PATH INFO" to...

CVE-2015-8766

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

CVE-2016-1498

Cross-site scripting XSS vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL...

CVE-2015-8766

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors...

CVE-2015-5447: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8508

CVE-2015-8508 is a cross-site scripting (XSS) vulnerability in Bugzilla’s showdependencygraph.cgi. The attacker can inject arbitrary script/HTML via a crafted bug summary when a local dot configuration is used. Affected products/versions include Bugzilla 2.x, 3.x, and 4.x before 4.2.16; 4.3.x and...

PT-2016-3659

Name of the Vulnerable Software and Affected Versions IBM Connections versions 3.x through 3.0.1.1 CR2 IBM Connections versions 4.0 through 4.0 CR3 IBM Connections versions 4.5 through 4.5 CR4 IBM Connections versions 5.0 through 5.0 CR2 Description A cross-site scripting XSS issue allows remote...

CVE-2015-7409

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-7409: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-7415: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-3762

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2.x through 7.2.5 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field. This could potentially lead to unauthorized...

CVE-2015-6017

CVE-2015-6017 refers to multiple cross-site scripting (XSS) vulnerabilities in the ZyXEL P-660HW-T1 v2 router running ZyNOS firmware 3.40(AXH.0). The issue resides in the web form at /Forms/rpAuth_1, where an attacker can craft requests that inject arbitrary script or HTML via the LoginPassword o...

PT-2015-7116

Name of the Vulnerable Software and Affected Versions ZyXEL P-660HW-T1 version 3.40AXH.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the LoginPassword or hiddenPassword parameters in the Forms/rpAuth 1 module. Recommendations For ZyXEL P-660HW-T1 versi...

PT-2015-7612

Name of the Vulnerable Software and Affected Versions ASUS Japan WL-330NUL versions prior to 3.0.0.42 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.0.0.42, update the...

CVE-2015-7790: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-6005

Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...

CVE-2015-7927: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6744

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 CF29 IBM WebSphere Portal versions 8.0.0 before 8.0.0.1 CF19 IBM WebSphere...

Cisco EPC3928 Cross-Site Scripting Vulnerability

Cisco EPC3928 is a wireless router product from Cisco USA. A cross-site scripting vulnerability exists in the management interface of the Cisco EPC3928. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with user-entered values...