Cross site scripting

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

PT-2018-16168

Name of the Vulnerable Software and Affected Versions public versions prior to 0.1.4 public versions = 1.0.3 Description The issue allows embedding HTML in file names, which under certain conditions might lead to the execution of malicious JavaScript. This is due to the failure to sanitize...

PT-2018-6284

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.5 Description: This issue...

PT-2018-6418

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.5 Description: This issue...

PT-2018-5459

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.5 Description: This issue...

Cross-Site Scripting (XSS) in PAN-OS Management Web Interface

A Cross-Site Scripting XSS vulnerability exists in the PAN-OS session browser. Ref. PAN-93244; CVE-2018-9335 Successful exploitation of this issue may allow an attacker to inject arbitrary JavaScript or HTML. An attacker would need to successfully authenticate prior to exploiting this issue. This...

Galaxy server cross-site scripting vulnerability

Galaxy is a web-based open source system for accessing, reproducing, and analyzing biomedicine. galaxy server is one of the servers. A cross-site scripting vulnerability exists in multiple templates of the Galaxy server in Galaxy version 14.10, which stems from the program failing to properly...

DEBIAN-CVE-2018-1000557

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting XSS vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary javascript code within a victims' browser. This attack appear to be exploitable via Victim mus...

Cross site scripting

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...

CVE-2018-1000516

The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow for cross-site scripting XSS attacks. In this form of attack,...

PT-2018-9452

Name of the Vulnerable Software and Affected Versions OCS Inventory NG version ocsreports 2.4 Description The issue concerns a Cross Site Scripting XSS vulnerability in the login form and search functionality. This allows an attacker to execute arbitrary JavaScript code within a victim's browser...

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server affect IBM Spectrum Protect for Workstations (formerly Tivoli Storage Manger FastBack for Workstations) Central Administration Console (CVE-2017-1380, CVE-2017-1381)

Summary Vulnerabilities in IBM WebSphere Application Server affect IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager FastBack for Workstations Central Administration Console can allow users to embed arbitrary JavaScript code in the Web UI or allow a local attacker to obtain...

Security Bulletin: Cross-site Scripting vulnerabilities affect IBM Rational products based on IBM Jazz technology

Summary Potential Cross-site scripting vulnerabilities affect the following IBM Rational Products: Rational Engineering Lifecycle Manager RELM, Rational Rhapsody Design Manager Rhapsody DM Vulnerability Details CVEID: CVE-2016-8975 DESCRIPTION: IBM Rhapsody DM and IBM Rational Engineering Lifecyc...

html-janitor cross-site scripting vulnerability

html-janitor is a module for controlling, cleaning up HTML. A cross-site scripting vulnerability exists in html-janitor. A remote attacker can exploit this vulnerability by sending attacker-controlled data to the 'clean' function to execute arbitrary JavaScript code...

Cross site scripting

There is unauthenticated reflected cross-site scripting XSS in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change...

CVE-2018-12090

There is unauthenticated reflected cross-site scripting XSS in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change...

PT-2018-11004

Name of the Vulnerable Software and Affected Versions LAMS versions prior to 3.1 Description The issue concerns unauthenticated reflected cross-site scripting XSS that allows a remote attacker to introduce arbitrary JavaScript. This is achieved through the manipulation of an unsanitized GET...

PT-2018-9918

Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 5.0.02.16 Description: This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The fl...

Samsung Email EML File Parsing Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of EML...

Cross-site Scripting (XSS)

groovy-postbuild is vulnerable to cross-site scripting XSS attacks. The library does not escape user input for badge content, allowing a malicious user to inject and execute arbitrary Javascript...