PT-2011-2217

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a URL that contains a username. This can be achieved by manipulating the URL...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 drop-down selection lists, 2 the greater than character in the SquirrelSpell spellchecking plugin, and 3 errors associated wit...

PHP-Nuke Multiple Vulnerabilities

PHP-Nuke is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpnuke:php-nuke"; ifdescription...

CVE-2011-1334

Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...

Cross site scripting

Cross-site scripting XSS vulnerability in dereferer.php in A Really Simple Chat ARSC 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsclink parameter...

CVE-2011-1334

Cross-site scripting XSS vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from...

CVE-2011-2476

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

PT-2011-3423

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP...

PT-2011-3597

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris Adobe Flash Player versions prior to 10.3.185.22 on Android Description A cross-site scripting issue allows remote attackers to inject arbitrary web scri...

PT-2011-2858

Name of the Vulnerable Software and Affected Versions Apache Archiva versions 1.0 through 1.2.2 Apache Archiva versions 1.3.x before 1.3.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting...

Cross site scripting

Cross-site scripting XSS vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3660

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal version 7.0.0.1 Description A cross-site scripting XSS issue exists in the search center, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For IBM WebSphere Portal...

CVE-2011-0959

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Operations Manager CUOM before 8.6 allow remote attackers to inject arbitrary web script or HTML via 1 the extn parameter to iptm/advancedfind.do, 2 the deviceInstanceName parameter to iptm/ddv.do, the 3 cmd or 4 group parameter t...

CVE-2011-2020: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-1899

Multiple cross-site scripting XSS vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

PT-2011-2496

Name of the Vulnerable Software and Affected Versions RoboHelp versions 7 and 8 RoboHelp Server versions 7 and 8 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This is related to the files wf status.htm and wf topicfs.htm in the...

CVE-2011-1856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Business Availability Center BAC 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 an action name, 2 the action attribute of an s:submit element, or 3 t...