CVE-2015-6387

The CVE-2015-6387 entry refers to a cross-site scripting (XSS) vulnerability in Cisco UCS Central Software (version 1.3(0.1)). The root cause is insufficient input validation in the web interface, allowing an unauthenticated/remote attacker to inject arbitrary script or HTML via a crafted URL. Im...

Cross site scripting

Cross-site scripting XSS vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different...

CVE-2015-6372

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614...

PT-2015-2757

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 through 10 before Update 18 Adobe ColdFusion versions 11 through 11 before Update 7 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web...

CVE-2015-8105

CVE-2015-8105 affects Roundcube webmail, specifically the vulnerable component is program/js/app.js. The XSS flaw arises in the drag-and-drop file upload via the filename field, impacting Roundcube versions before 1.0.7 and 1.1.x before 1.1.3. Exploitation requires remote authenticated access, en...

CVE-2015-8105

Cross-site scripting XSS vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name in a drag-n-drop file upload...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1995

Multiple cross-site scripting XSS vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allow remote attackers to inject arbitrary web script or HTML via a crafted URL...

GLSA-201510-05 : MediaWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201510-05 MediaWiki: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to create a Denial of...

PT-2015-7198

Name of the Vulnerable Software and Affected Versions Cisco FireSight Management Center versions 5.4.1.3 through 6.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. Recommendations For versions 5.4.1.3 through 6.0, update ...

PT-2015-7197

Name of the Vulnerable Software and Affected Versions Cisco FireSight Management Center versions 5.3.1.5 through 5.4.1.3 Cisco FireSight Management Center versions 5.4.x Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...

CVE-2015-6494: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

SAP NetWeaver AS Java NavigationURLTester - XSS vulnerability

Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: SAP Bugs: XSS vulnerability Reported: 20.10.2015 Vendor response: 21.10.2015 Date of Public Advisory: 08.03.2016 Reference: SAP Security Note 2238375 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class: XSS...

CVE-2015-5444

CVE-2015-5444 affects HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 up to 2.3.4; multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script via unspecified vectors. Root cause details aren’t explicitly stated in the connected documents. Impact is remote code e...

PT-2015-2462

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 7.0.5 ownCloud Server versions 8.0.x prior to 8.0.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a double quote character in a filename in a shared folder...

CVE-2015-5444: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP Smart Profile Server Data Analytics Layer SPS DAL 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7377

The CVE-2015-7377 vulnerability affects WordPress Pie Register plugin versions before 2.0.19, where an unsanitized invitaion_code parameter in pie-register.php enables reflected XSS. The root cause is improper handling of the GET parameter, allowing injection of arbitrary script/HTML. Impact is r...

CVE-2015-1813

Cross-site scripting XSS vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812...

PT-2015-5453

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.606 Jenkins LTS versions prior to 1.596.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Jenkins versions pri...

CVE-2015-1813: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812...