CVE-2013-4045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-7002

LiveZilla 5.1.0.0 is vulnerable to a reflected XSS in mobile/php/translation/index.php via the g_language parameter. The issue allows remote attackers to inject arbitrary script/HTML and is classified with CVSS v2 base score 4.3 (I: Partial). A fix was released and the vulnerability is fixed in L...

CVE-2013-7188: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6837

Cross-site scripting XSS vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATHINTO to the default URI...

CVE-2013-6178: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer GRC 5.x before 5.4 SP1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6191: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5968

Name of the Vulnerable Software and Affected Versions HP Operations Orchestration versions prior to 9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP Operations Orchestration versions prior...

Cross site scripting

Cross-site scripting XSS vulnerability in the product-creation administrative page in Cisco WebEx Sales Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul25540...

CVE-2013-4845: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on HP Officejet Pro 8500 aka A909 All-in-One printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6005

CVE-2013-6005 is an XSS vulnerability in Cybozu Dezie prior to 8.1.0. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button, potentially triggering arbitrary script execution in a logged-in user’s browser. Affected products include Cyboz...

Cross site scripting

Cross-site scripting XSS vulnerability in the search implementation in IBM Rational Quality Manager RQM 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to...

CVE-2013-6224

Multiple cross-site scripting XSS vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 a name in the call administrator feature, 2 unspecified vectors to the admins visitor information panel, or 3 a text message in a chat session, which i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to 1 admin/hostdependencies.php, 2 admin/hosts.php, or other unspecified pages that allow search input, related to the search functionali...

CVE-2013-7025

CVE-2013-7025 describes multiple XSS vulnerabilities in ematStaticAlertTypes.jsp within the Alert Settings area of Dell SonicWALL Global Management System (GMS), SonicWALL Analyzer, and UMA EM5000 7.1 SP1 prior to Hotfix 134235. The underlying issue is reflected/stored XSS via the parameters valf...

CVE-2013-4171

Multiple cross-site scripting XSS vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the search results in the 1 RSS and 2 Atom feed templates...

CVE-2013-4492

CVE-2013-4492 describes a cross-site scripting (XSS) vulnerability in the Ruby i18n gem: an attacker can cause arbitrary script HTML injection via a crafted I18n::MissingTranslationData.new call. Affected software is the i18n gem for Ruby, prior to version 0.6.6. The root cause is improper handli...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...