Cross-site Scripting (XSS)

coastercms is vulnerable to cross-site scripting XSS attacks. A malicious user can pass a POST request to the application to inject and execute arbitrary Javascript...

PT-2018-13367

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

Cross-Site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting. An attacker is able to inject arbitrary Javascript into a victim's browser via the titlesen parameter in core/admin/pages/add/ to steal session cookies or perform unwanted actions on behalf of the user...

PT-2018-13101

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.02 IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering...

CVE-2017-1649: Improper Neutralization of Input During Web Page Generation

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2018-12491

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13781

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-12304

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13782

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-12255

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM versions 5.0 through 5.02 IBM Rational Quality Manager RQM versions 6.0 through 6.0.6 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality an...

PT-2018-1939

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.02 IBM Rational Quality Manager versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

CVE-2018-14037

Cross-site scripting XSS vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload...

Cross site scripting

Cross-site scripting XSS vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2018-20233)

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A cross-site scripting vulnerability...

PT-2018-1946

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0 through 9.0 Description The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to embed arbitrary JavaScript code in the web interface, potentially leading to...

PT-2018-13411

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 5.0 through 5.0.2 IBM Rational DOORS Next Generation versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionalit...

PT-2018-13632

Name of the Vulnerable Software and Affected Versions IBM Rational Engineering Lifecycle Manager versions 5.0 through 5.02 IBM Rational Engineering Lifecycle Manager versions 6.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intend...

PT-2018-1944

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 8.0 through 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

Cross-Site Scripting (XSS)

dojo is vulnerable to cross-site scripting. User input is not sanitized in the server response before being displayed on a user's browser. An attacker is able to inject arbitrary Javascript into a victim's browser through a crafted URL via the status parameter...

Cross-site Scripting (XSS)

atmosphere-runtime is vulnerable to a cross-site scripting XSS attack. The library does not properly escape the JSONP callback parameter when passed to the server, allowing a malicious user to inject and execute arbitrary Javascript through it...