CVE-2012-6559

CVE-2012-6559 impacts FreeNAC 3.02 with multiple cross-site scripting (XSS) vulnerabilities, enabling remote attackers to inject scripts/HTML via parameters to stats.php (comment, mac, graphtype, name, type) or deviceadd.php (comment). OpenVAS notes additional SQL injection vectors, expanding the...

Cross site scripting

Cross-site scripting XSS vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2311

Cross-site scripting XSS vulnerability in static/js/share.js aka the social bookmarking widget in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0688

CVE-2013-0688 (Wonderware Information Server): XSS in WIS 4.0 SP1, 4.5 Portal, and 5.0 Portal allows remote injection of script/HTML. Root cause: improper neutralization of input in web pages (CWE-79). Impact noted as potentially remote code execution, data disclosure, or session credential hijac...

CVE-2013-3267

CVE-2013-3267 is an XSS vulnerability in the Joomla! Highlighter plugin affecting Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4. The issue is triggered by improper validation of user-supplied input, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Impact det...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0535

Multiple cross-site scripting XSS vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2321

Cross-site scripting XSS vulnerability in HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1159

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...

Cross site scripting

Cross-site scripting XSS vulnerability in a Flash component in Cisco Unified Computing System UCS Central allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430...

Cross site scripting

Cross-site scripting XSS vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0569

Cross-site scripting XSS vulnerability in the Communities component in IBM Connections 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0503

Cross-site scripting XSS vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1749

Cross-site scripting XSS vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field...

CVE-2013-1937

Multiple cross-site scripting XSS vulnerabilities in tblgisvisualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the 1 visualizationSettingswidth or 2 visualizationSettingsheight parameter. NOTE: a third party reports that this ...

Cross site scripting

Cross-site scripting XSS vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...

CVE-2013-0936

CVE-2013-0936 is an XSS vulnerability in EMC Smarts products (IP Manager, Service Assurance Manager, Server Manager, VoIP Availability Manager, Network Protocol Manager, and MPLS Manager) prior to version 9.2. A crafted URL can inject arbitrary web script/HTML, impacting authenticated users. The ...

CVE-2013-1887

The CVE affects Drupal's Views module (7.x-3.x) prior to 7.x-3.6. The vulnerability arises from insufficient sanitization of certain view configuration fields, enabling remote authenticated users with specific permissions to inject arbitrary web script or HTML (XSS). The attacker would exploit th...

Cross site scripting

Cross-site scripting XSS vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors...