CVE-2022-34924

Lanling OA Landray Office Automation OA internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp...

CVE-2014-3013

Multiple cross-site scripting XSS vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a 1 custom JSP or 2 custom renderer...

CVE-2014-3013

Multiple cross-site scripting XSS vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a 1 custom JSP or 2 custom renderer...

PT-2014-5022

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 4.5 SP10 through 6.0.5.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via crafted input to a custom JSP or custom renderer, potentially leading to...

CVE-2014-3013: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a 1 custom JSP or 2 custom renderer...