IBM Resilient Cross-Site Scripting Vulnerability

IBM acquired Resilient Systems in order to enhance its security business and provide an automated response playbook to attacks. resilient's platform will be combined with IBM's QRadar Intelligence Platform and will be integrated with the Blue Giant's security portfolio. IBM Resilient suffers from...

Drupal D8 Editor File upload module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.File is one of the file handling modules. A cross-site scripting vulnerability exists in the Drupal D8 Editor File upload module that stems from a failure to properly validate user inpu...

WordPress Google Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Google Maps is one of the map plug-ins. A cross-site request forgery vulnerability exists in the admin.jsp pag...

Drupal Views Send Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. View sending enables you to send emails to multiple users from a single view. A cross-site scripting vulnerability exists in the Drupal Views Send module due to the program failing to...

Multiple HTML Injection Vulnerabilities in Foreman

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. Foreman has multiple HTML injection vulnerabilities due to the program failing to adequately validate...

Palo Alto Networks PAN-OS Cross-Site Scripting Vulnerability (CNVD-2016-11098)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from a cross-site scripting vulnerability due to the program failing to properly filter user-supplied input. An attacker could exploit the...

Foreman HTML Injection Vulnerability (CNVD-2016-11092)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. An HTML injection vulnerability exists in Foreman 1.1 and later versions, which stems from the program...

HPE Network Node Manager i (NNMi) Cross-Site Scripting Vulnerability (CNVD-2016-11189)

HPE Network Node Manager i NNMi is a suite of network management software from Hewlett Packard Enterprise HPE. The software unifies the management of network failures, availability, and performance in a single centralized console, and enables users to extend network uptime, improve performance, a...

HPE Network Node Manager i (NNMi) Cross-Site Scripting Vulnerability

HPE Network Node Manager i NNMi is a suite of network management software from Hewlett Packard Enterprise HPE. The software unifies the management of network failures, availability, and performance in a single centralized console, and enables users to extend network uptime, improve performance, a...

SAP Hybris E-commerce Suite SQL Injection Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. An injection vulnerability exists in SAP Hybris E-commerce Suite that stems from the program failing to adequately filter user-submitted input. An attacke...

Multiple IBM Rational Products Cross-Site Scripting Vulnerabilities

IBM Rational Team Concert and Rational Collaborative Lifecycle Management are collaborative lifecycle management solutions from IBM USA.IBM Rational DOORS Next Generation RDNG is a requirements management solution from IBM USA. IBM Rational Engineering Lifecycle Manager is a suite of engineering...

OwnCloud/NextCloud Cross-Site Scripting Vulnerability

OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...

Faraznet CMS Cross-Site Scripting Vulnerability

Faraznet CMS is a content management system. A cross-site scripting vulnerability exists in the ssearch.php page in version 4.x of Faraznet CMS. Due to the program failing to adequately filter user-submitted input. An attacker can exploit the vulnerability to steal cookie-based authentication or...

Simple PHP Blog Cross-Site Scripting Vulnerability

Simple PHP Blog is an open source free single-user Blog program written in PHP. A cross-site scripting vulnerability exists in the q parameter of the search.php page in Simple PHP Blog version 0.4.0 due to the program failing to adequately filter user-submitted input. An attacker can exploit this...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2016-10750)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC versions 3.0.1.6 through 6.0.2. A remote attacker c...

IBM Campaign Cross-Site Scripting Vulnerability

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. A cross-site scripting vulnerability exists in IBM Campaign. A remote attacker could exploit the vulnerability ...

Novell NetIQ Identity Manager Cross-Site Scripting Vulnerability

NetIQ Designer for Identity Manager is a suite of graphical interface tools for configuring and deploying Identity Manager, a comprehensive solution for providing identity and control access, from NetIQ USA. A cross-site scripting vulnerability exists in Novell NetIQ Identity Manager. As the...

Novell NetIQ Identity Manager HTML Injection Vulnerability (CNVD-2016-10657)

NetIQ Designer for Identity Manager is a suite of graphical interface tools for configuring and deploying Identity Manager, a comprehensive solution for providing identity and control access, from NetIQ USA. An HTML injection vulnerability exists in Novell NetIQ Identity Manager. An attacker coul...

SAP Hybris Management Console HTML Injection Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. An HTML injection vulnerability exists in SAP HMC version 5.6, which stems from the program failing to adequately filter user-submitted input. An attacker...

SAP Hybris Management Console Cross-Site Scripting Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. A cross-site scripting vulnerability exists in SAP HMC version 5.6, which stems from the program's failure to adequately filter user-submitted input. When...