CVE-2012-1036: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a message...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Business Availability Center BAC 9.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0327: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0225: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2416

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Information Server versions 4.0 SP1 through 4.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Invensys Wonderware...

CVE-2011-5084: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0719

Cross-site scripting XSS vulnerability in IBM Tivoli Endpoint Manager TEM 8 before 8.2 patch 3 allows remote attackers to inject arbitrary web script or HTML via the ScheduleParam parameter to the webreports program...

CVE-2012-1842: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 604G.GS00100, also distributed as the Dell ML6000 tape library with firmware before A20-00 590G.GS00100, allows remote attackers to inject arbitrary web script or HTML vi...

CVE-2012-0399

Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5082

Cross-site scripting XSS vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2memberproauthnetcheckoutcoupon parameter aka Coupon Code field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the 1 cusemail parameter in a custlostpw action; or 2 helpname, 3 helpemail, 4 helpwebsite, or 5 helpexampleurl parameters in an...

CVE-2012-1787

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...

CVE-2011-4819

Multiple cross-site scripting XSS vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to 1 maximo.jsp or 2 the default URI under ui/...

PT-2012-1966

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management and Asset Management Essentials versions 6.2, 7.1, and 7.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to specific endpoints, including 1...

PT-2012-2501

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.454 Jenkins LTS versions prior to 1.424.5 Jenkins Enterprise versions 1.400.x prior to 1.400.0.13 Jenkins Enterprise versions 1.424.x prior to 1.424.5.1 Description A cross-site scripting XSS issue allows remote...

CVE-2012-0715

Cross-site scripting XSS vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database CCMDB 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0715: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database CCMDB 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1000

Multiple cross-site scripting XSS vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 message parameter to admins/login/forgot/index.php, or the 2 displayname or 3 email parameter to account/preferences.php...

Cross site scripting

Cross-site scripting XSS vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...