3873 matches found
Cisco Prime Central for Hosted Collaboration Solution Directory Traversal Vulnerability
A vulnerability in Cisco Prime Central for Hosted Collaboration Solution could allow an unauthenticated, remote attacker to view system files. The vulnerability is due to insufficient path traversal prevention. An attacker could exploit this vulnerability by submitting a crafted URL. An exploit...
CVE-2013-1156
Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...
Directory traversal
Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...
CVE-2013-1156
CVE-2013-1156 affects Cisco Prime Central for Hosted Collaboration Solution. A directory traversal vulnerability exists due to insufficient path traversal prevention, allowing an unauthenticated remote attacker to read arbitrary files by submitting a crafted URL. Cisco’s advisory states that soft...
CVE-2013-1156
Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...
CVE-2013-0571
Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Server: XSS Vulnerability in jPlayer
A cross-site scripting XSS vulnerability in all ownCloud versions prior to 5.0.5 including the 4.0.x branch allows remote attackers to execute arbitrary javascript when a user opens a special crafted URL. This vulnerability exists in the bundled 3rdparty plugin "jPlayer", "jPlayer" released versi...
Code injection
The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...
rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template
darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted URL...
CVE-2013-0936
Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...
CVE-2013-0936
Cross-site scripting XSS vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a...
CVE-2013-0936
CVE-2013-0936 is an XSS vulnerability in EMC Smarts products (IP Manager, Service Assurance Manager, Server Manager, VoIP Availability Manager, Network Protocol Manager, and MPLS Manager) prior to version 9.2. A crafted URL can inject arbitrary web script/HTML, impacting authenticated users. The ...
CVE-2013-0453
Cross-site scripting XSS vulnerability in Web Reports in IBM Tivoli Endpoint Manager TEM before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2012-5757
Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in Web Reports in IBM Tivoli Endpoint Manager TEM before 8.2.1372 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2012-5757
Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...