CVE-2013-5025: Undefined Security Weakness

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

PT-2013-1799

Name of the Vulnerable Software and Affected Versions Juniper Secure Access SA with IVE OS versions prior to 7.1r13 Juniper Secure Access SA with IVE OS versions 7.2.x prior to 7.2r7 Juniper Secure Access SA with IVE OS versions 7.3.x prior to 7.3r2 Description A cross-site scripting XSS issue...

CVE-2012-5460: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help page in Juniper Secure Access SA with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter...

CVE-2013-3979

CVE-2013-3979: Multiple XSS vulnerabilities in the Web Client’s help pages (Web\Content\Help) of IBM Cognos Command Center (Star Command Center/Star Analytics) prior to version 10.1, triggered when using Internet Explorer. Exploitation is via unspecified vectors by remote authenticated users; imp...

PT-2013-4770

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions prior to 10.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the help pages of the Web Client. These vulnerabilities allow remote authenticated users to inject arbitrary w...

CVE-2013-3778

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

CVE-2013-3778

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

CVE-2013-3778

Oracle E-Business Suite versions 12.0.6 and 12.1.3 are affected in the Oracle Applications Technology Stack under the Help component. The vulnerability is described as an unspecified issue that could allow remote integrity impact via unknown vectors; no exploit details are provided. The connected...

PT-2013-4617

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.0.6 through 12.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Help in the Oracle Applications Technology Stack component...

CVE-2013-3778: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help...

Sql injection

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

Sql injection

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...

CVE-2013-3578

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

PT-2013-4489

Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description A SQL injection issue in the Help Desk application of Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL...

PT-2013-4490

Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter, which is the...

CVE-2013-3577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...

CVE-2013-3578: Improper Neutralization of Special Elements used in an OS Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

PT-2013-4378

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the Help index page, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter...

CVE-2013-3421: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...