Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Presence Server 9.11 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773...

PT-2015-6467

Name of the Vulnerable Software and Affected Versions Cisco Unified Presence Server version 9.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an unspecified value. Recommendations For Cisco Unified Presence Server version 9.11,...

CVE-2015-4220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Presence Server 9.11 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773...

CVE-2015-5064

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned...

Cross site scripting

Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do...

PT-2015-6015

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8d Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 0.8.8d, update to version 0.8.8d or later to resolve the issue...

Cross site scripting

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Dream Multimedia DreamBox DM500-S Cross-Site Scripting Vulnerability

Dream Multimedia DreamBox DM500-S is a Linux-based digital TV set-top box receiver from Dream Multimedia, Germany. A cross-site scripting vulnerability exists in the Dream Multimedia DreamBox DM500-S. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML v...

CVE-2015-4679

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

CVE-2015-4656

Multiple cross-site scripting XSS vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML via the 1 success parameter to login.php or 2 crafted URL parameters to index.php, as demonstrated by the t parameter to photo/...

CVE-2015-4587

Cross-site scripting XSS vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu...

CVE-2015-4139

Cross-site scripting XSS vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more parameter to wp-admin/options-general.php...

PT-2015-6585

Name of the Vulnerable Software and Affected Versions Opsview versions 4.6.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted check plugin, the description in a host profile, or the plugin args parameter to a Test service check page...

CVE-2015-3429

Cross-site scripting XSS vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier...

CVE-2015-2665: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2015-03926)

Cisco FireSIGHT System Software is the United States Cisco Cisco company's set of management center software, which supports the centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security appliances network security and operational functions of the...

Cross site scripting

Cross-site scripting XSS vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4372: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6558

Name of the Vulnerable Software and Affected Versions Profile2 Privacy module versions 7.x-1.x through 7.x-1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web script or HTML...