CVE-2013-5376: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user...

CVE-2013-4167

Cross-site scripting XSS vulnerability in CMS Made Simple CMSMS before 1.11.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobile Device Management MDM portal in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266...

PYSEC-2013-4

Multiple cross-site scripting XSS vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5880

Name of the Vulnerable Software and Affected Versions Graphite versions prior to 0.9.11 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions prior to 0.9.11,...

CVE-2013-5586

CVE-2013-5586 affects WikkaWiki (versions up to 1.3.4, patched as 1.3.4-p1). The issue is a Cross-Site Scripting (XSS) vulnerability in the wikka.php handler, caused by insufficient sanitisation of the GET parameter "wakka" passed to "/sql/". This allows remote attackers to inject arbitrary scrip...

CVE-2013-5930

Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...

CVE-2013-5918

Cross-site scripting XSS vulnerability in platinumseopack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2013-5501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328...

CVE-2013-1034: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-4815

Name of the Vulnerable Software and Affected Versions IBM SPSS Analytical Decision Management versions 6.1 through 6.1 before IF1 IBM SPSS Analytical Decision Management versions 6.2 through 6.2 before IF1 IBM SPSS Analytical Decision Management versions 7.0 through 7.0 before FP1 IF6 Description...

CVE-2013-4704: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ChamaNet ChamaCargo 7.0000 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

PT-2013-5711

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.1 through 7.1r14 Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.2 through 7.2r10 Juniper Junos Pulse Secure Access Service aka SSL VPN...

Cross site scripting

Cross-site scripting XSS vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3603

Cross-site scripting XSS vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Coursemill Learning Management System LMS 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to error messages and 1 crafted event attributes or 2 greater than characters that are optional within a browser's...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Coursemill Learning Management System LMS 6.8 allow remote attackers to inject arbitrary web script or HTML via crafted input containing a %22 sequence, a different issue than CVE-2013-3604...

CVE-2013-3604

Multiple cross-site scripting XSS vulnerabilities in Coursemill Learning Management System LMS 6.6 allow remote attackers to inject arbitrary web script or HTML via crafted input...

CVE-2013-5707

CVE-2013-5707 describes multiple XSS vulnerabilities in Coursemill Learning Management System (LMS) 6.8, enabling remote attackers to inject arbitrary web script or HTML via crafted input containing a %22 sequence. This is a separate issue from CVE-2013-3604. The NVD entry lists a MEDIUM severity...