CVE-2016-1318

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCux15489...

jenkins: cross-site scripting flaw in Jenkins core (SECURITY-143)

Cross-site scripting XSS vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

h2o -- directory traversal vulnerability

Yakuzo OKU reports: When redirect directive is used, this flaw allows a remote attacker to inject response headers into an HTTP redirect response...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors...

PT-2016-4008

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.6.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including email sendmailfrom name, email sendmailfrom address, email smtpfrom name, email smtpfro...

CVE-2015-7415

Multiple cross-site scripting XSS vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

The vulnerability of the ColdFusion interpreter allows attackers to inject any web script or HTML code.

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web script or HTML code remotely...

The vulnerability of the Cisco Secure Access Control System allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

PT-2015-2714

Name of the Vulnerable Software and Affected Versions Microsoft Lync versions 2010 through 2013 SP1 Microsoft Skype for Business version 2016 Lync 2010 Attendee affected versions not specified Lync Room System affected versions not specified Description The issue exists due to inadequate protecti...

IBM Security QRadar Incident Forensics Cross-Site Scripting Vulnerability (CNVD-2015-07481)

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. A cross-site scripting vulnerability exist...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSight Management Center MC 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922...

UBUNTU-CVE-2015-5667

Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

The vulnerability of the Microsoft SharePoint Server corporate application package and the Microsoft SharePoint Foundation software for electronic document management allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remote...

Multiple Cross-Site Scripting Vulnerabilities in HP Smart Profile Server Data Analytics Layer

HP Smart Profile Server Data Analytics Layer is a product from Hewlett-Packard HP designed for communications service providers to manage and analyze customer data for telecom business needs. Multiple cross-site scripting vulnerabilities exist in HP Smart Profile Server Data Analytics Layer versi...

Kentico CMS Has Multiple Cross-Site Scripting Vulnerabilities

Kentico CMS is an enterprise-grade web content management system and customer experience management system. Kentico CMS 8.2 suffers from multiple cross-site scripting vulnerabilities. Allows remote attackers to inject any web script or HTML via the CMSModules/AdminControls/Pages/UIPageaspx or...

CVE-2015-7822

Multiple cross-site scripting XSS vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a 1 parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the 2 CMSBodyClass cookie variable to the default URI...

4images cross-site scripting vulnerability

4images is a web-based image gallery management system. A cross-site scripting vulnerability exists in 4images 1.7.11 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2015-4971

Cross-site scripting XSS vulnerability in IBM Emptoris Strategic Supply Management Platform and Emptoris Program Management 10.x before 10.0.1.4iFix3, 10.0.2.x before 10.0.2.7iFix1, 10.0.3.x before 10.0.3.2, and 10.0.4.x before 10.0.4.0iFix1 allows remote authenticated users to inject arbitrary w...

Mango Automation 2.6.0 Cross Site Scripting

Mango Automation 2.6.0 Remote XSS POST Injection Vulnerability Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a flexible SCADA, HMI And Automation software application that...

IPython Notebook and Jupyter Notebook Cross-Site Scripting Vulnerabilities

IPython is an enhanced version of Python's native interactive shell developed by the IPython team.Notebook is one of the development environments.Jupyter Notebook is one of the suite of web applications for creating and sharing code and illustrative text documents. A cross-site scripting...