CVE-2015-7398

Cross-site scripting XSS vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a...

CVE-2015-8796

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL...

Sucuri: Manipulating of Sucuri.net (List Subscription) Emails (HTML/Script Injection)

Hi there team! I would like to report a 'sneaky', 'weird', but excisting vulnerability, located at the Sucuri.net domain. “A vulnerability exists within your website allowing un-sanitized email form field inputs which could lead an attacker to pass malicious html&script content masquerading as a...

CVE-2016-2214

Cross-site scripting XSS vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus with software before V100R001C00SPC319 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

Mapbox Mapbox.js HTML Injection Vulnerability

Mapbox Mapbox.js is a JavaScript plugin for quickly creating maps. An HTML injection vulnerability exists in Mapbox Mapbox.js, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

New Relic: Html injection in monitor name textbox

payload in monitor name textbox : image tag is executed in Monitot failed email fix : Need to done secure parse encode in monitor name textbox to prevent html injection in email...

Opendocman 1.3.4 HTML Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Opendocman 1.3.4 Fixed in: 1.3.5 Fixed Version Link: http://www.opendocman.com/free-download/ Vendor Website: http://www.opendocman.com/ Vulnerability Type: HTML Injection Remote Exploitable: Yes Reported to vendor:...

Equibase.com HTML Injection

Vulnerability Type: HTML Injection Possible XSS Title: Equibase.com HTML Injection Site Description: Equibase.com is the official source for horse racing results, mobile racing data, statistics as well as all other horse racing and thoroughbred racing information. Details: The page...

CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

CVE-2015-7439

Cross-site scripting XSS vulnerability in InfoSphere Data Architect IDA, as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software RSA4WS 8.5 through 9.5, and Rational Software Architect RealTime RSART 8.5 through 9.5, allows remote...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0209

CVE-2016-0209 affects IBM WebSphere Portal 8.5.0 up to before CF09, exposing a cross-site scripting (XSS) vulnerability via unspecified vectors. The OpenVAS entry corroborates a WebSphere Portal XSS issue; the explanation in the sources describes a vulnerability consistent with XSS but does not s...

CVE-2016-0209

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Contact Center Express 10.01, 10.51, 10.61, and 11.01 allow remote attackers to inject arbitrary web script or HTML via vectors related to permalinks, aka Bug ID CSCux92033...

Multiple Buffalo Products Cross-Site Scripting Vulnerabilities

Buffalo is the wireless router product of the Buffalo Group. A cross-site scripting vulnerability exists in multiple Buffalo products. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Office Document Reader for iOS has multiple vulnerabilities

Office Document Reader for iOS is a set of Office document reader software based on iOS system. Cross-site request forgery vulnerabilities and HTML injection vulnerabilities exist in Office Document Reader for iOS 5.1.13 and earlier versions. These vulnerabilities can be exploited by attackers to...

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

Zendesk: [CRITICAL] HTML injection issue leading to account take over

Hi , I have found an HTML injection issue in https://.zendesk.com/people/tags that could lead to account take over. I can't get malicious scripts executed , but an attacker can take over the admin's account by injecting the following HTML code. html CLICK HERE the data-method attribute is not...