CVE-2015-1911

CVE-2015-1911 is an XSS vulnerability in IBM Sterling Selling and Fulfillment Suite components: Sterling Order Management 8.5 (before HF113), Sterling Selling and Fulfillment Foundation 9.0.0 (before FP92), and Sterling Field Sales 9.0 (before HF7). The IBM bulletin (IBM Security Bulletin) attrib...

CVE-2014-6192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2015-1613

Name of the Vulnerable Software and Affected Versions IBM Security SiteProtector System versions 3.0 through 3.0.0.6 IBM Security SiteProtector System versions 3.1 through 3.1.0.3 IBM Security SiteProtector System versions 3.1.1 through 3.1.1.1 Description The issue allows remote authenticated...

Cross site scripting

Cross-site scripting XSS vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themeseditor parameter in an addtemplate action to admin/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2015-2250: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...

PT-2015-5688

Name of the Vulnerable Software and Affected Versions concrete5 versions prior to 5.7.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including banned word to "/index.php/dashboard/system/conversations/bannedwords/success", channel t...

PT-2015-4842

Name of the Vulnerable Software and Affected Versions Cisco Security Manager version 4.70SP11 Description A cross-site scripting XSS issue in the HTTP module allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco Security Manager version...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW00...

PT-2015-3694

Name of the Vulnerable Software and Affected Versions Y-Cam camera models SD range versions 4.30 and earlier Y-Cam camera models S range versions 4.30 and earlier Y-Cam EyeBall version 4.30 and earlier Y-Cam Bullet VGA versions 4.30 and earlier Y-Cam Bullet HD 720 version 4.30 and earlier Y-cam...

PT-2015-6141

Name of the Vulnerable Software and Affected Versions TheCartPress eCommerce Shopping Cart plugin for WordPress versions prior to 1.3.9.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including billing firstname, billing lastname,...

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted contact...

PT-2015-3525

Name of the Vulnerable Software and Affected Versions TinyWebGallery versions prior to 1.8.8 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the selitems parameter in a copy, chmod, or arch action to "admin/index.php" or the searchite...

CVE-2015-3384

Cross-site scripting XSS vulnerability in the Bank Account Listing Page in the Commerce Balanced Payments module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Linkit module before 7.x-2.7 and 7.x-3.x before 7.x-3.3 for Drupal, when the node search plugin is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a node title...

CVE-2015-3359

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

PT-2015-6207

Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Tools module versions prior to 7.x-1.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a node or taxonomy term title, potentially leading to cross-site scripting XSS attacks...