2104 matches found
Coppermine Photo Gallery Cross-Site Scripting Vulnerability
Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...
Drupal Ctools Module Cross-Site Scripting Vulnerability
Drupal is a free and open source content management system developed in PHP. ctools is one of the API modules used to improve the development experience. A cross-site scripting vulnerability exists in the Drupal Ctools module, which allows remote attackers to exploit the vulnerability to inject...
Splunk Enterprise and Splunk Light Dashboard Cross-Site Scripting Vulnerability
Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Dashboard for Splunk Enterprise and Splunk...
NAP Turbo NAS Series Devices 'Edit Account Profile' Cross-Site Scripting Vulnerability
NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in the "Edit Account Profile" page of NAP Turbo NAS Series Devices, which can be exploited by remote attackers to inject malicious...
IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05520 )
The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...
IBM Domino Server Cross-Site Scripting Vulnerability (CNVD-2015-05521)
The IBM Lotus Domino server is a WEB-based collaborative application architecture. A cross-site scripting vulnerability exists in IBM Domino Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information ...
WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05156)
WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...
Red Hat JBoss Operations Network HTTP Error Page Cross-Site Scripting Vulnerability
JBoss Operations Network is open source network management software based on Java EE. An input validation vulnerability in the JBoss Operations Network HTTP error page allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to no proper sanitization of xlink:href attributes. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. Th...
WordPress Plotly Plugin HTML Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up personal blog site . Plotly is one of the plugin to the Wordpress site embedded Plotly charts . An HTML injection vulnerability exists ...
Google Chrome Generic Cross-Site Scripting Vulnerability
Google Chrome is an open source WEB browser. A cross-site scripting vulnerability in Google Chrome org/chromium/chrome/browser/UrlUtilities.java on Android allows attackers to build malicious WEB pages that can be parsed by tricking a user into parsing them, which can obtain sensitive information...
Novell GroupWise Input Validation Cross-Site Scripting Vulnerability
Novell GroupWise is a cross-platform collaboration software. An input validation cross-site scripting vulnerability exists in Novell GroupWise, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack use...
Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT System Software
The Cisco FireSIGHT Management Center centrally manages the network security and operational functions of Cisco ASA and Cisco FirePOWER Network Security Appliances with FirePOWER Services. A cross-site scripting vulnerability exists in Cisco FireSIGHT, which allows remote attackers to exploit the...
Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager (CNVD-2015-04702)
Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can ...
Cacti cross-site scripting vulnerability (CNVD-2015-04695)
Cacti is a set of open source network traffic monitoring and analysis tools. A cross-site scripting vulnerability exists in Cacti's settings.php script, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...
IBM Case Manager Cross-Site Scripting Vulnerability
IBM Case Manager is a solution for managing cases. The solution supports the combination of content, processes and people, and provides frameworks, relevance methods and integration tools to view a holistic view of cases. A cross-site scripting vulnerability exists in IBM Case Manager, which allo...
Drupal Migrate Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in the PHP language.Migrate is a module used to port content from other CMSs to Drupal's framework. A cross-site scripting vulnerability exists in the Drupal Migrate module, which allows remote attackers to exploit the vulnerabilit...
Zend zend-diactoros has multiple vulnerabilities
Zend Framework is a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services . zend-diactoros is an implementation of PSR-7 HTTP messages . A cross-site scripting vulnerability and an open redirection vulnerability exists in Zend...
Pivotx Session Fixation Vulnerability
Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A session fixation vulnerability exists in the fileupload.php file in Pivotx versions prior to 2.3.11. A remote attacker can exploit this...
