Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Identity Management & Governance IMG before 6.8.1 P18 and 6.9.x before 6.9.1 P6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

The vulnerabilities of Microsoft Lync Server and Skype for Business Server allow attackers to inject arbitrary web or HTML code.

The vulnerability of the jQuery server messaging components in Microsoft Lync Server and Skype for Business Server exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code through a special...

PYSEC-2015-26

Cross-site scripting XSS vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site reque...

CVE-2015-6938

CVE-2015-6938 describes an XSS in the file browser of IPython Notebook/Jupyter Notebook. Affected products are IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5, where a folder name in the file browser notebook/notebookapp.py can be crafted to inject arbitrary web script or HT...

CVE-2015-6972

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to inject arbitrary web script or HTML via the 1 groupchatName parameter to plugins/clientcontrol/create-bookmark.jsp; the 2 urlName parameter to plugins/clientcontrol/create-bookmark.jsp;...

CVE-2015-6929

Multiple cross-site scripting XSS vulnerabilities in Nokia Networks formerly Nokia Solutions and Networks and Nokia Siemens Networks @vantage Commander allow remote attackers to inject arbitrary web script or HTML via the 1 idFilter or 2 nameFilter parameter to cftraces/filter/flcopy.jsp; the 3...

CVE-2015-6929

Technical details (affected products/versions, root cause, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor notices to confirm scope and remediation.

CVE-2015-6945

Cross-site scripting XSS vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an addurltask action to dlm/downloadman.cgi...

Microsoft SharePoint CVE-2015-2522 HTML Injection Vulnerability

Description Microsoft SharePoint is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication...

The vulnerability of the Mac OS X operating system allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Quick Look component in the Mac OS X operating system exists due to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code using a previously visited website, during t...

The vulnerability of the Firefox OS operating system allows a hacker to inject arbitrary HTML code.

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code through a special search request executed after the browser...

The vulnerability of the Firefox browser, which allows a hacker to execute cross-site scripting attacks

The vulnerability of the nsCSPHostSrc::permits function in Firefox exists due to the lack of measures taken to protect web page structures. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code remotely...

MantisBT 1.1.2 - 1.2.17 XSS Vulnerability - Windows

MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

The vulnerability of the Firefox OS operating system allows a hacker to inject arbitrary HTML code.

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code by manipulating the title and search engine field of...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

MediaWiki Widgets Extension Cross-Site Scripting Vulnerability

MediaWiki is the Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . Widgets is one of the wiki page templates can be embedded in the HTML page...

CVE-2015-2985

CVE-2015-2985 concerns guide-park.com BBS X102 1.03, a bulletin board software. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with the browser executing the payload. Affected software is BBS X102 Ver...

CVE-2015-6810

CVE-2015-6810 is an XSS vulnerability in Invision Power Services IPS Community Suite (IPS Community Suite) 4.x up to version 4.0.12.1. Remote authenticated users can inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/. The NVD entry lists a base...

CVE-2015-5612

Affected software: October CMS (build 271 and earlier). Vulnerability: cross-site scripting (XSS) via the caption tag of a profile image. Root cause: improper handling of caption tag leads to script/HTML injection. Impact: remote attacker can inject arbitrary script/HTML. Exploitation details are...