Docker UI v0.10.0 - Multiple Persistent Vulnerabilities

Document Title: =============== Docker UI v0.10.0 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1803 Release Date: ============= 2016-03-29 Vulnerability Laboratory ID VL-ID: ==================================== 18...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to inject any Web or HTML code.

The vulnerability of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

ownCloud Multiple Vulnerabilities (Mar 2016) - Linux

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of the IBM WebSphere Portal server exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2016-01250)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A cross-site scripting vulnerability in Cybozu Office versions 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7580

Cross-site scripting XSS vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a crafted CDATA node...

CVE-2015-7578

CVE-2015-7578 is a cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem, prior to version 1.0.3, used with Ruby on Rails 4.2.x and 5.x. The issue allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes due to inadequate sanitization. Exploitat...

The vulnerability of the SAP HANA database management system allows a hacker to inject arbitrary ABAP code.

The vulnerability of the SAP HANA database management system is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary ABAP code remotely...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unity Connection 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238...

IBM WebSphere Application Server XSS Vulnerability (swg21647522)

IBM WebSphere Application Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 Runtime Workbench RWB or 2 Pmitest servlet in the Process Monitoring Infrastructure PMI, aka SAP Security Notes 2206793 and 2234918...

CVE-2015-8756

CVE-2015-8756 affects TYPO3 6.2.x before 6.2.16 in the Indexed Search (indexed_search) component, where the search results view is vulnerable to cross-site scripting. The underlying issue allows a remote authenticated editor to inject arbitrary web script/HTML via unspecified vectors. The documen...

CVE-2015-8759

CVE-2015-8759 describes a Cross-site Scripting (XSS) vulnerability in TYPO3. The flaw lies in the typoLink function, making TYPO3 6.2.x prior to 6.2.16 and 7.x prior to 7.6.1 susceptible when a link field is crafted by an authenticated editor. Impact described: ability to inject arbitrary web scr...

CVE-2015-8758

TYPO3 CVE-2015-8758 affects frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1. The vulnerability is a frontend XSS vulnerability allowing remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. Root cause: cross-site scripting in unspecified fr...

CVE-2015-7252

The CVE-2015-7252 entry describes a reflected XSS in the ZTE ZXHN H108N R1A (and affected W300) devices’ webproc CGI, via the errorpage parameter. The vulnerability allows remote injection of script/HTML and could enable session-related issues or credential exposure as part of broader multi-CVE f...

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary web or HTML code.

The vulnerability in Microsoft Exchange Server web applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the web interface of Microprogramming Software for Control Systems of Power Supply Networks Janitza UMG 508, 509, 511, 604, 605 exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to inject...

Vulnerability of the microprogramming software used in Micrologix 1100 and 1400 programmable logic controllers, allowing intruders to inject arbitrary web or HTML code

The vulnerability of Micrologix 1100 and 1400 microprogrammed logic controllers’ web servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...