PT-2013-3391

Name of the Vulnerable Software and Affected Versions Premium Responsive theme versions prior to 7.x-1.6 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTM...

PT-2013-3392

Name of the Vulnerable Software and Affected Versions Company theme versions prior to 7.x-1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the administer themes permission to inject arbitrary web script or HTML. Recommendations For versions prior t...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS9...

Cross site scripting

Cross-site scripting XSS vulnerability in the HMI web application in Siemens WinCC TIA Portal 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data...

PT-2013-3427

Name of the Vulnerable Software and Affected Versions Piwik versions prior to 1.11 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.11, update to version 1.11 or later to resolve the issue...

Cross site scripting

Cross-site scripting XSS vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0328

Cross-site scripting XSS vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0506: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-3707

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Web Player versions 3.3.x through 3.3.2 TIBCO Spotfire Web Player versions 4.0.x through 4.0.2 TIBCO Spotfire Web Player versions 4.5.x through 4.5.0 TIBCO Spotfire Web Player versions 5.0.x through 5.0.0 Description A cross-sit...

CVE-2013-2372: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5200

Cross-site scripting XSS vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5200: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-1767

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions prior to 5.2 E0401 HP Intelligent Management Center for Automated Network Manager ANM versions prior to 5.2 E0401 Description A cross-site scripting XSS issue allows remote authenticated users to...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors related to the search feature...

CVE-2012-4835

IBM Cognos BI is affected by CVE-2012-4835: a reflected cross-site scripting vulnerability in IBM Cognos BI versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 that allows remote attackers to inject arbitrary script via unspecified vectors. The vulnerability is disc...

CVE-2012-4836: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...

CVE-2012-4835: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the balancerhandler function in the manager interface in modproxybalancer.c in the modproxybalancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML vi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary web script or HTML via the 1 action, 2 matchtype, 3 sortby, or 4 start parameters...