3925 matches found
Crlf injection
CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...
Directory traversal
Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL...
CVE-2016-0399
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-2883
Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...
CVE-2016-2872
IBM QRadar SIEM and QRadar Incident Forensics (7.2.x) are affected by CVE-2016-2872 due to a path traversal in parameters that allows remote attackers to read arbitrary files via a crafted URL. Affected products: QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7. Roo...
Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-04414)
Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite 7.8.1 and earlier...
CVE-2016-0229
Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0229
Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0229
Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...
CVE-2016-1437
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
CVE-2016-1439
Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...
IBM QRadar SIEM and Security QRadar Incident Forensics Path Traversal Vulnerabilities
IBM QRadar SIEM and IBM Security QRadar Incident Forensics are both products of IBM USA. The former is a suite of solutions that utilize security intelligence to protect assets and information from advanced threats; the latter is a suite of security forensic investigation software. A path travers...
IBM Maximo Asset Management Cross-Site Scripting Vulnerability
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...
Design/Logic Flaw
The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL...
CVE-2016-1864
The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL...
CVE-2016-1864
CVE-2016-1864 affects WebKit’s XSS auditor used in Apple iOS before 9.3 and Safari before 9.1. The issue is that redirects are not properly handled when the auditor runs in block mode, allowing a crafted URL to leak sensitive information to remote attackers. This is a WebKit-level bug affecting h...
