CVE-2016-2883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

PT-2016-4146

Name of the Vulnerable Software and Affected Versions IBM Connections versions 4.0 through CR4 IBM Connections versions 4.5 through CR5 IBM Connections versions 5.0 through CR4 IBM Connections versions 5.5 before CR1 Description A cross-site scripting XSS issue allows remote authenticated users t...

Cybozu Garoon 3.x < 4.2.0 Information Disclosure and XSS Vulnerabilities

Cybozu Garoon is prone to information disclosure and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-5834

Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...

CVE-2016-5834

Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...

CVE-2015-8699

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8699

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-04396)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in...

PT-2016-3955

Name of the Vulnerable Software and Affected Versions CA Release Automation versions 5.0.2 through 5.0.2-227 CA Release Automation versions 5.5.1 through 5.5.1-1616 CA Release Automation versions 5.5.2 through 5.5.2-434 CA Release Automation versions 6.1.0 through 6.1.0-1026 Description The issue...

PT-2016-4100

Name of the Vulnerable Software and Affected Versions IBM Marketing Platform versions 8.6.x through 9.1.2.1 IBM Marketing Platform versions 9.x before 9.1.2.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can le...

CVE-2016-4513

Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4513: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826...

PT-2016-6170

Name of the Vulnerable Software and Affected Versions Collne Welcart e-Commerce plugin versions prior to 1.8.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.8.3, update t...

PT-2016-6169

Name of the Vulnerable Software and Affected Versions Collne Welcart e-Commerce plugin versions prior to 1.8.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.8.3, update t...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

WordPress <= 4.5.2 - XSS #2

WordPress 4.5.2 and previous versions are prone to a cross-site scripting vulnerability in the columntitle function in wp-admin/includes/class-wp-media-list-table.php. It allows an attacker to inject arbitrary web script or HTML via a crafted attachment name. Related:...

SquidGuard Cross-Site Scripting Vulnerability

Shalla Secure Services squidGuard is a URL redirection plug-in for Squid proxy server and web caching server software from Shalla Secure Services, Germany. A cross-site scripting vulnerability exists in versions 1.3 and 1.4 of squidGuard. An attacker can exploit this vulnerability to inject...

Cisco FirePOWER Management Center Cross-Site Scripting Vulnerability

Cisco FirePOWER Management Center is the United States Cisco Cisco company's new generation of firewall management center software. A cross-site scripting vulnerability exists in Cisco Firepower Management Center. A remote attacker can exploit this vulnerability to inject arbitrary web script or...