Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server and Lync Server XSS Elevation of Privilege Vulnerability."...

Invision Power Services IPS Community Suite Resource Management Error Vulnerability

Invision Power Services IPS Community Suite a.k.a. Invision Power Board, IPB or Power Board is a PHP and MySQL based Web forum program from Invision Power Services, Inc. A security vulnerability exists in Invision Power Services IPS Community Suite 4.0.11 and earlier versions, which can be...

The vulnerability of the iOS operating system allows a perpetrator to initiate arbitrary calls in FaceTime.

The vulnerability of the UIKit WebView component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to initiate arbitrary calls in FaceTime using a specially crafted URL...

Code injection

Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.0.12.1 allows remote attackers to cause a denial of service loop and memory consumption via a crafted URL...

CVE-2015-6812

Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.0.12.1 allows remote attackers to cause a denial of service loop and memory consumption via a crafted URL...

AjaxPortal di.php File Inclusion (CVE-2009-2262)

A remote file inclusion vulnerability has been reported in AjaxPortal. The vulnerability is caused due to improper handling of crafted URL using the "pathtoserverdata" parameter. Successful exploitation will let the remote attacker to execute arbitrary PHP code...

Design/Logic Flaw

The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an intended user-confirmation requirement by constructing a crafted data: URL and triggering navigation to an arbitrary http: or https: URL at a certain early poin...

CVE-2015-6658

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files...

Cross site scripting

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files...

CVE-2015-6658

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files...

CVE-2015-6658

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files...

CVE-2015-6658

Removed by vendor...

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

Open redirect

Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting XSS attacks via a crafted URL, aka SPR SJAR9DNGDA...

Cross site scripting

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any web or HTML code.

The vulnerability of the Active Content Filtering component in the IBM WebSphere Portal user interface exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any web or HTML code.

The vulnerability of the application interface of IBM WebSphere Portal exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS...

CVE-2015-2420

Cross-site scripting XSS vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS...