The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

CVE-2015-5009

Cross-site scripting XSS vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-5002

Cross-site scripting XSS vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0031

Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2016 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Exchange Spoofing Vulnerability," a different vulnerability than CVE-2016-0029...

CVE-2015-5036

Cross-site scripting XSS vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5035...

Apache Cordova Whitelist Bypass Vulnerability

Cordova is to build native mobile applications with HTML, CSS, JavaScript. A security vulnerability exists in Cordova Android 3.7.2 and earlier versions. Because whitelisting restrictions are not properly applied, an attacker can bypass the whitelist and execute arbitrary Javascript using a...

Drupal core Overlay module open redirect vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Overlay is one of the modules that displays the Drupal administration interface at the top of the page. An open redirect vulnerability exists in the Overlay module in Drupal core 7.41 a...

Infinite Automation Mango Automation Information Disclosure Vulnerability (CNVD-2015-07169)

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. Infinite Automation Mango Automation 2.5.x and 2.6.x prior to 2.6.0, build 430, suffers from a...

CVE-2015-4955

Cross-site scripting XSS vulnerability in IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 before 8.5.6.0 CF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

The vulnerability of the iOS operating system allows a hacker to trigger a service failure in the application.

The vulnerability of the Application Store component of the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure for the application through a specially crafted ITMS URL...

The vulnerability of the iOS operating system allows a hacker to bypass the HSTS security mechanism and gain access to protected information.

The vulnerability of the CFNetwork HTTP Protocol component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the HSTS security mechanism and gain access to protected information through a specially...

The vulnerability of Skype for Business Server and Microsoft Lync Server allows a hacker to inject arbitrary web or HTML code.

The vulnerabilities of Skype for Business Server and Microsoft Lync Server exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary web or HTML code through a specially crafted URL...

Vulnerability in Cisco Prime Collaboration Assurance

Cisco Prime Collaboration Assurance is a set of enterprise collaboration network management solutions from the U.S. company Cisco Cisco. A security vulnerability exists in the Web framework of Cisco Prime Collaboration Assurance. A remote attacker could exploit the vulnerability by sending a...

Moxa Industrial Managed Switch Denial of Service Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A denial of service vulnerability exists in the embedded GoAhead web server of the Moxa EDS-405A/EDS-408A, which can be exploited to cause a reboot of the affected device with the help of a constructed URL...

The vulnerability of WebSphere Application Server’s application servers allows attackers to inject arbitrary web or HTML code.

The vulnerability of WebSphere Application Server exists because measures are not taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted URL...

pcs: Command injection with root privileges.

A command injection flaw was found in the pcsd web UI. An attacker able to trick a victim that was logged in to the pcsd web UI into visiting a specially crafted URL could use this flaw to execute arbitrary code with root privileges on the server hosting the web UI...

The vulnerability of Google Chrome browser allows a perpetrator to execute arbitrary web or HTML code.

The vulnerability of the org/chromium/chrome/browser/UrlUtilities.java component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code using a specially crafted...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2015-04971)

IBM Business Process Manager is a comprehensive business process management platform. A cross-site scripting vulnerability exists in IBM Business Process Manager 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0,8.5.6 through 8.5.6.0, which could allow a...

Moodle 'moodlelib_test.php' Open Redirect Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. An open redirection vulnerability exists in Moodle that stems from the program's failu...

UBUNTU-CVE-2015-3660

Cross-site scripting XSS vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL in embedded PDF content...