CVE-2017-6650

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

Palo Alto PAN-OS Cross-Site Scripting Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from a cross-site scripting vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to...

Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Monitoring Application

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Monitoring Application. The...

Cisco Unified Computing System Director Cross-Site Scripting Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...

Juniper Networks IDP Appliance Configuration Manager Cross-Site Scripting Vulnerability

Juniper Networks IDP is a suite of intrusion detection defense solutions. A cross-site scripting vulnerability exists in Juniper Networks IDP Appliance Configuration Manager due to a failure to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary scrip...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03606)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Multiple cross-site scripting vulnerabilities in Symantec Web Gateway (CNVD-2017-03683)

Symantec Web Gateway is a spam filter that combines anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec USA. Multiple cross-site scripting vulnerabilities exist in Symantec Web Gateway that stem from a failure to adequately validate user input...

Soruly whatanime.ga Cross-Site Scripting Vulnerability

Soruly whatanime.ga is a program developed by soruly to search for animated scenes by image. Soruly whatanime.ga suffers from a cross-site scripting vulnerability that stems from the program failing to properly validate user-supplied input. When an unsuspecting user browses the affected site, an...

Palo Alto Networks PAN-OS HTML Injection Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execu...

Multiple Cross-Site Scripting Vulnerabilities in SonicDICOM PACS

SonicDICOM is a PACS software from JIUN Corporation that combines the functionality of DICOM with a web browser based on DICOM Viewer. SonicDICOM has multiple stored cross-site scripting vulnerabilities. The vulnerabilities stem from input passed to multiple API POST parameters failing to validat...

Drupal Search API Sorts Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.The Search API Sorts module is one of the modules that provides custom sorting and global sort blocks for the Search API. A cross-site scripting vulnerability exists in the Drupal Searc...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2017-01995)

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, as the program fails to adequately validate user input. An attacker could exploit this...

Symphony cross-site scripting vulnerability (CNVD-2017-01078)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extension and so on. A cross-site scripting attack vulnerability exists in Symphony CMS, which stems from a failure to properly validate user input. An attacker could...

Ghost 'Your profile' page HTML injection vulnerability

Ghost is an open source, controlled platform for building and running modern online publishing. Ghost suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execute specially crafted HTML and script cod...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A remote command execution vulnerability exists in Cisco WebEx Meetings Server that stems from a failure to properl...

Novell Open Enterprise Server Directory Traversal Vulnerability

The Novell Open Enterprise Server OES is an enterprise-class server from the American company Novell that provides network services, file and print services, and network management capabilities. A directory traversal vulnerability exists in Novell Open Enterprise Server that stems from a failure ...

Multiple Japan Pension Service Products Arbitrary Code Execution Vulnerabilities

Japan Pension Service Specification check program, etc. are the software of Japan Pension Service. An arbitrary code execution vulnerability exists in multiple Japan Pension Service products where the program fails to validate user-submitted input. An attacker could exploit this vulnerability to...

IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability

IBM Kenexa LMS on Cloud is a full-featured, configurable, enterprise-grade, social Learning Management System LMS that integrates social networking, collaboration, and knowledge sharing capabilities. The software provides interactive elements that support users in evaluating learning content and...

Multiple HTML Injection Vulnerabilities in Foreman

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. Foreman has multiple HTML injection vulnerabilities due to the program failing to adequately validate...

SAP Hybris Management Console Cross-Site Scripting Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. A cross-site scripting vulnerability exists in SAP HMC version 5.6, which stems from the program's failure to adequately filter user-submitted input. When...