Cross-Site Scripting (XSS)

camaleoncms is vulnerable to cross-site scripting. Files uploaded via the media uploader are not validated. This allows a remote attacker to inject arbitrary Javascript into a victim's browser via the filename parameter...

PT-2018-12982

Name of the Vulnerable Software and Affected Versions IBM Rational Publishing Engine versions 6.0.5 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

Cross site scripting

IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341...

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2018-20672)

IBM Rational Collaborative Lifecycle Management CLM and so on are the products of IBM Corporation in the U.S.A. IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational IBM Rational Collaborative Lifecycle Management CLM is a collaborative...

Shopify: H1514 Stored XSS in Return Magic App portal content

Summary: Stored XSS vulnerability was found in return magic app portal content which executes in the application domain in https://services.alveo.io/dashboard-shopify/settings/portal/content Description: It's been found that Return Magic app allows users to add HTML content to their return portal...

CVE-2018-1691

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2018-12286

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality an...

PT-2018-13388

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality an...

PT-2018-13781

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13095

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-12255

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality an...

CVE-2018-9079

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model DOM of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the...

CVE-2018-9079: Improper Neutralization of Input During Web Page Generation

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model DOM of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the...

PT-2018-18839

Name of the Vulnerable Software and Affected Versions Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier Description The Content Explorer application in the affected devices allows users to upload files to shares, including SVG images, without proper restrictions. These imag...

PT-2018-18840

Name of the Vulnerable Software and Affected Versions Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier Description The issue allows adversaries to craft URLs that can modify the Document Object Model DOM of a page. Additionally, they can inject HTML script tags and HTML ta...

CVE-2018-1660

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 1448...

CVE-2018-1716

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1471...

CVE-2018-1820

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150096...

PT-2018-1946

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0 through 9.0 Description The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to embed arbitrary JavaScript code in the web interface, potentially leading to...

CVE-2018-1560

IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...