PT-2018-4349

Name of the Vulnerable Software and Affected Versions IBM AppScan Enterprise Edition versions 9.0.x before 9.0.2 iFix 001 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM AppScan Enterprise...

PT-2018-8907

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.6.0 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Cybozu Garoon versions 3.0.0 through 4.6.0, update to a versi...

CVE-2018-0549: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

HPE System Management Homepage Cross-site Scripting (CVE-2017-12544) - Ver2

A cross-site scripting vulnerability exists in HPE System Management Homepage. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2018-6903

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...

CVE-2014-6169

Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777...

CVE-2014-6169

Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777...

CVE-2014-6169

CVE-2014-6169 affects IBM Forms Experience Builder 8.5.0 and 8.5.1. The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected sources confirm the affected product versions and the XSS nature b...

Cross site scripting

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

CVE-2018-9155

CVE-2018-9155 is an XSS in Open-AudIT Professional 2.1.1. A remote attacker can inject arbitrary script/HTML by a crafted Name (display) in attributes or by crafted log names in Admin->Logs, enabling scripted content in the UI. Connected sources confirm Open-AudIT Professional 2.1.1 as affecte...

CVE-2015-4557

Cross-site scripting XSS vulnerability in the newTwittersignbutton function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter. NOTE: this may overlap...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

PT-2018-4282

Name of the Vulnerable Software and Affected Versions IBM Forms Experience Builder versions 8.5.0 through 8.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 8.5.0 and 8.5.1, update...

CVE-2014-6169: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777...

Cross site scripting

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...

CVE-2018-9928

CVE-2018-9928 is a Cross-site scripting (XSS) vulnerability in MetInfo 6.0, located in save.php, allowing remote attackers to inject arbitrary script via the webname or weburl parameters. Affected software: MetInfo 6.0 (save.php). Root cause: unsanitized user input in webname/weburl leading to sc...

CVE-2018-9928

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08049)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

Hardcoded credentials

Target influence via framing vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames...