Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (NVD-C-2017-09305)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

WordPress WP Mail plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. wpmail is the function used to send mail. A cross-site scripting vulnerability exists in the WordPress WP Mail plugin due to the program failing to adequately validate user input. An...

TYPO3 Caddy Extension 'paymill/api/php/payment.php' Cross-Site Scripting Vulnerability

Typo3 is one of the leading brands of open source content management systems CMS and content management frameworks CMF based on PHP and MySQL databases and is a powerful open source solution. A cross-site scripting vulnerability exists in the TYPO3 Caddy extension that stems from the program...

Moodle PoodLL Filter plugin cross-site scripting vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia.PoodLL is a collection of plug-ins for adding audio and video. A cross-site scripting...

Ionize Arbitrary Code Execution Vulnerability

ionize is a CMS system developed using CodeIgniter. A cross-site scripting vulnerability exists in Ionize version 1.0.8 due to the program failing to adequately validate user-supplied input. An attacker can exploit this vulnerability to execute arbitrary HTML and script code in a user's browser...

Jenkins HTML Injection Vulnerability (CNVD-2017-01345)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Jenkin...

Jenkins HTML Injection Vulnerability (CNVD-2017-01368)

CloudBees Jenkins formerly known as Hudson Labs is a set of U.S. CloudBees, Inc. based on Java development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Jenkins suffers fr...

Jenkins HTML Injection Vulnerability (CNVD-2017-01341)

CloudBees Jenkins is a Java-based open source , sustainable integration automation server , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks.LTS Long-Term Support is CloudBees Jenkins A long-term support version . Jenkins has an HTML...

CVE-2016-0305

IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

CVE-2016-0305

IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the U...

Cross-site scripting vulnerability in multiple IBM products (CNVD-2017-01276)

IBM Rational Requirements Composer and Rational DOORS Next Generation are requirements management solutions. A cross-site scripting vulnerability exists in multiple IBM products. An attacker could exploit this vulnerability to execute arbitrary script code on a user's browser at an affected site ...

CVE-2016-2924

IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site,...

CVE-2016-0218

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security...

CVE-2016-0217

IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web...

CVE-2016-0265

IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL ...

Schneider homeLYnk Controller LSS1001003 Cross-Site Scripting Vulnerability

Schneider Electric provides total solutions for the energy and infrastructure, industrial, data center and network, building and residential markets in more than 100 countries. Schneider homeLYnk Controller LSS1001003 is a logic controller. A cross-site scripting vulnerability exists in the...

Adobe Acrobat Extension for Chrome Cross-Site Scripting Vulnerability

Adobe Acrobat are the United States of America Odo than Adobe company's a PDF file editing and conversion tools.Adobe Acrobat Extension for Chrome is used for Chrome extension. Acrobat Extension for Chrome version 15.1.0.3 there is a cross-site scripting vulnerability, the vulnerability stems fro...

Cisco NetFlow Generation Appliance Cross-Site Scripting Vulnerability

The Cisco NetFlow Generation Appliance is a scalable cost-effective solution for traffic visibility in today's high-performance data centers. A cross-site scripting vulnerability exists in the Cisco NetFlow Generation Appliance that stems from a failure to properly validate user input. An attacke...

IBM Cognos Business Intelligence Server Cross-Site Scripting Vulnerability (CNVD-2017-01025)

IBM Cognos is an integrated business intelligence BI and planning solution. A cross-site scripting vulnerability exists in IBM Cognos Business Intelligence Server that stems from a failure to adequately validate user input. An attacker could exploit the vulnerability to execute arbitrary script...

Ghost 'Your profile' page HTML injection vulnerability

Ghost is an open source, controlled platform for building and running modern online publishing. Ghost suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execute specially crafted HTML and script cod...