2488 matches found
CVE-2016-1462
Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...
CVE-2016-0313
Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...
Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information
XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...
Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information
XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...
Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information
XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...
DEBIAN-CVE-2016-5099
Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...
DEBIAN-CVE-2016-5731
Cross-site scripting XSS vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message...
CVE-2016-2081
Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1431
Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...
IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-04104)
The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...
The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.
The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...
CVE-2016-1211
Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4789
Cross-site scripting XSS vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified...
Cross site scripting
Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...
DEBIAN-CVE-2016-4567
Cross-site scripting XSS vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."...
ChitaSoft SQL Injection Vulnerability
ChitaSoft suffers from a remote SQL injection vulnerability that allows remote attackers to execute malicious sql commands on the web application side or connect to dbms...
CVE-2016-3721
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables...
DEBIAN-CVE-2016-4561
Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...
CVE-2016-4561
Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...
IBM Security Identity Manager Virtual Appliance Cross-Site Scripting Vulnerability
IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...