CVE-2015-6658

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files...

CVE-2015-6658

Removed by vendor...

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

Cross site scripting

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

Open redirect

Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting XSS attacks via a crafted URL, aka SPR SJAR9DNGDA...

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any web or HTML code.

The vulnerability of the Active Content Filtering component in the IBM WebSphere Portal user interface exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any web or HTML code.

The vulnerability of the application interface of IBM WebSphere Portal exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS...

CVE-2015-2420

Cross-site scripting XSS vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS...

Design/Logic Flaw

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the 1 bittorrent or 2 magnet protocol...

CVE-2015-5474

BitTorrent and uTorrent are affected by a remote code execution vulnerability due to how URLs with the bittorrent: or magnet: protocols are handled. A crafted URL can inject arbitrary command line parameters and have them passed to the BitTorrent/uTorrent executable, enabling code execution under...

CVE-2015-3267

Cross-site scripting XSS vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-3267

Cross-site scripting XSS vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

The vulnerability of the microprogramming software used in Cisco TelePresence TC conference call control devices allows intruders to inject arbitrary HTTP headers.

The vulnerability of the microprogramming software used in Cisco TelePresence TC devices exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP headers using a specially crafted URL...

Memory corruption

The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service memory corruption and reboot via a crafted URL...

CVE-2015-3961

The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service memory corruption and reboot via a crafted URL...

Atlassian JIRA 4.3.x < 5.1.1 Multiple Open Redirect Vulnerabilities

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is 4.3.x prior to 5.1.1. It is, therefore, potentially affected by multiple open redirect vulnerabilities. A remote attacker, using a crafted URL, can exploit these vulnerabilities to...

Atlassian JIRA < 5.0.7 Privilege Escalation

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to 5.0.7. It is, therefore, potentially affected by a privilege escalation vulnerability. A remote attacker, using a crafted URL, can exploit this to bypass administrator-only...

Cisco IM and Presence Service Cross-Site Scripting Vulnerability

Cisco IM and Presence Service is the United States Cisco Cisco company's suite of software can provide enterprise-class instant messaging and network presence services. A cross-site scripting vulnerability exists in Cisco IM and Presence Service versions prior to 10.5 MR1, which stems from the...