PT-2011-4016

Name of the Vulnerable Software and Affected Versions SemanticScuttle versions prior to 0.98 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

CVE-2011-3423: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or...

PT-2011-3452

Name of the Vulnerable Software and Affected Versions Microsoft Windows SharePoint Services 3.0 SP2 Microsoft SharePoint Foundation 2010 Gold Microsoft SharePoint Foundation 2010 SP1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via...

Cross site scripting

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in TIBCO Spotfire Server 3.0.x before 3.0.2, 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.1, and Spotfire Analytics Server before 10.1.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-4420

Name of the Vulnerable Software and Affected Versions WebsiteBaker versions prior to 2.8 LEPTON affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors. This is a distinct issue from previous...

CVE-2011-3181

Multiple cross-site scripting XSS vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a 1 table name, 2 column name, or 3 index name...

CVE-2011-3181

Multiple cross-site scripting XSS vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a 1 table name, 2 column name, or 3 index name...

CVE-2011-2712

CVE-2011-2712 is a cross-site scripting (XSS) vulnerability affecting Apache Wicket 1.4.x prior to 1.4.18 when setAutomaticMultiWindowSupport is enabled. The root cause is the application’s multi-window support configuration enabling injection of arbitrary JavaScript/HTML via unspecified paramete...

CVE-2011-2644

Cross-site scripting XSS vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display...

PT-2011-3696

Name of the Vulnerable Software and Affected Versions Kiwi versions prior to 3.74.2 SUSE Studio versions prior to 1.1.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing. This affects t...

CVE-2011-2410: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3144: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2409

Cross-site scripting XSS vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe RoboHelp 8 and 9 before 9.0.1.262, and RoboHelp Server 8 and 9, allows remote attackers to inject arbitrary web script or HTML via the URI, related to templatestock/whutils.js...

CVE-2011-2408: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3830

Name of the Vulnerable Software and Affected Versions HP Network Automation versions 7.2x through 7.6x HP Network Automation versions 9.0 through 9.10 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendatio...

CVE-2011-2958: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2710

CVE-2011-2710 involves multiple XSS vulnerabilities in Joomla! prior to 1.7.0. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php (reachable through index.php) and (2) the searchword parameter in a search action to index.php in the ...