CVE-2015-4380: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6536

Name of the Vulnerable Software and Affected Versions Ubercart Webform Integration module versions prior to 6.x-1.8 Ubercart Webform Integration module versions prior to 7.x-2.4 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML...

PT-2015-6541

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 6.x-1.6 Drupal versions 6.x-2.x prior to 6.x-2.8 Drupal versions 7.x-1.x prior to 7.x-1.2 Description The issue allows remote authenticated users with permission to create or edit taxonomy terms or nodes to inject...

PT-2015-4852

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 5.3.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters. Recommendations For Cisco FireSIGHT System Software version 5.3.1.1,...

CVE-2015-4427

CVE-2015-4427 affects Ektron Content Management System in versions before 9.10 SP1 (Build 9.1.0.184.1.114). The vulnerability is cross-site scripting (XSS) in Test/WorkArea/workarea.aspx, exploitable by remote authenticated users via the (1) page, (2) action, (3) folder_id, or (4) LangType parame...

PT-2015-6588

Name of the Vulnerable Software and Affected Versions Ektron Content Management System CMS versions prior to 9.10 SP1 Build 9.1.0.184.1.114 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the page, action, folder id, or LangType parameters in the...

CVE-2015-2960: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6008

Name of the Vulnerable Software and Affected Versions Zoho NetFlow Analyzer versions prior to build 10250 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to build 10250, update ...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6175: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to 1 org/apache/sling/api/servlets/HtmlResponse and 2...

CVE-2015-0212

Cross-site scripting XSS vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted course summary...

CVE-2015-2269

CVE-2015-2269 refers to multiple XSS vulnerabilities in Moodle’s lib/javascript-static.js, exploitable by remote authenticated users via the alt or title attributes of IMG elements. Affected Moodle versions are up to 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4. The provi...

CVE-2015-2269

Multiple cross-site scripting XSS vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a 1 alt or 2 title attribute in an IMG element...

PT-2015-1928

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This is due to the...

PT-2015-6341

Name of the Vulnerable Software and Affected Versions Roomcloud plugin versions prior to 1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters in the roomcloud.php file. The vulnerable parameters include pin, start day, start month, start...

CVE-2015-1389

CVE-2015-1389 affects Aruba ClearPass Policy Manager (CPPM) prior to 6.4.5, where an attacker can inject arbitrary script via the username parameter to tips/tipsLoginSubmit.action (stored XSS). Affected component is CPPM’s web login flow; root cause is inadequate input handling in the login proce...

CVE-2015-4132: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4063

Cross-site scripting XSS vulnerability in includes/nspsearch.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter in the nspsearch page to wp-admin/admin.php...

CVE-2015-1911

Cross-site scripting XSS vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales SFS 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or...