CVE-2014-2710

Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...

CVE-2016-2104

Multiple cross-site scripting XSS vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via 1 the label parameter to admin/BunchDetail.do; 2 the packagename, 3 searchsubscribedchannels, or 4 channelfilter parameter to software/packages/NameOverview.d...

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

CVE-2015-8864

Cross-site scripting XSS vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068...

CVE-2015-7565: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML...

PT-2017-5888

Name of the Vulnerable Software and Affected Versions: I-O DATA DEVICE RockDisk versions prior to 1.05e1-2.0.5 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. This issue exists due to an incomplete fix...

PT-2017-5849

Name of the Vulnerable Software and Affected Versions: Oliver formerly Webshare versions 1.3.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific pages, including the login page at "index.php" and the login form at...

PT-2017-7229

Name of the Vulnerable Software and Affected Versions Ember.js versions 1.8.x through 1.10.x Ember.js versions 1.11.x before 1.11.4 Ember.js versions 1.12.x before 1.12.2 Ember.js versions 1.13.x before 1.13.12 Ember.js versions 2.0.x before 2.0.3 Ember.js versions 2.1.x before 2.1.2 Ember.js...

CVE-2014-3887: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...

Cross site scripting

Cross-site scripting XSS vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...

CVE-2016-2803

Cross-site scripting XSS vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-4892

CVE-2016-4892 is a cross-site scripting vulnerability affecting SetucoCMS (all versions). The connected documents confirm an XSS in SetucoCMS, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially causing a user’s browser to execute arbitrary code o...

CVE-2015-7562

TeamPass 2.1.24 and earlier are affected by CVE-2015-7562, a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script or HTML via the label value of an item or the name of a role. The affected component is the TeamPass application (versions up to and includ...

CVE-2016-2803

Cross-site scripting XSS vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-2803

CVE-2016-2803 is a cross-site scripting vulnerability in Bugzilla’s dependency graphs affecting versions 2.16rc1–4.4.11 and 4.5.1–5.0.2. The issue allows remote attackers to inject arbitrary web script or HTML. OpenVAS and Fedora advisories confirm the bug is exploitable via the Bugzilla dependen...

CVE-2016-1179

Cross-site scripting XSS vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML...

CVE-2016-2803

Cross-site scripting XSS vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML...

CVE-2015-7562

Multiple cross-site scripting XSS vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 label value of an item or 2 name of a role...