WSO2 Identity Server Cross-Site Scripting Vulnerability

WSO2 Identity Server is an open source identity service that supports Information Cards, OpenID and XACML identity frameworks. WSO2 Identity Server suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

Drupal Inline Entity Form Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Inline Entity Form module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

AudioShare Cross-Site Scripting Vulnerability

AudioShare is an audio file manager. The AudioShare forgot.php script fails to properly handle the 'email' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions whe...

GarrettCom Magnum 6K and 10K Switches Cross-Site Scripting Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A cross-site scripting vulnerability exists in GarrettCom Magnum 6K and 10K Switches, which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to...

JSON 'ActiveSupport::JSON.encode()' function cross-site scripting vulnerability

JSON is a lightweight data exchange language , it is a subset of Javascript , and the use of completely language-independent text format . A cross-site scripting vulnerability exists in JSON, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing...

Adobe Connect 'admin/home/homepage/search' Cross-Site Scripting Vulnerability

Adobe Connect is an enterprise web conferencing solution. A cross-site scripting vulnerability exists in Adobe Connect, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions whe...

RSA Validation Manager 'displayMode' and 'wrapPreDisplayMode' Cross-Site Scripting Vulnerabilities

RSA Validation Manager is a validation program for RSA. The RSA Validation Manager user interface fails to properly handle the 'displayMode' and 'wrapPreDisplayMode' parameters, allowing remote attackers to exploit vulnerabilities by injecting malicious script or HTML code that can be used to gai...

TYPO3 BE User Log Extension Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system, BE User Log is a user login extension plugin. TYPO3 BE User Log has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Novell ZENworks Mobile Management Cross-Site Scripting Vulnerability

Novell ZENworks Mobile Management is a mobile device management solution. A cross-site scripting vulnerability in the Novell ZENworks Mobile Management login form allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data,...

Alcatel-Lucent OmniSwitch security vulnerabilities

Crossite scripting, session hijack...

WordPress Backup to Dropbox plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress Backup to Dropbox is a plugin for backing up data to Dropbox. A cross-site scripting vulnerability exists in the WordPress Backup to Dropbox...

CUPS Sample Engine Cross-Site Scripting Vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A cross-site scripting vulnerability exists in the CUPS sample engine, which allows remote attackers ...

IBM Watson Cross-Site Scripting Vulnerability

IBM Watson is an artificial intelligence system from IBM. A cross-site scripting vulnerability exists in IBM Watson, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Cisco Application and Content Networking System Cross-Site Scripting Vulnerability

The Cisco Application and Content Networking System is an application and content networking system. A cross-site scripting vulnerability exists in Cisco Application and Content Networking System, which could be exploited by remote attackers to inject malicious script or HTML code that, when view...

Microsoft Exchange Server Input Validation Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. An input validation vulnerability exists in Microsoft Exchange Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hija...

Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability

Microsoft Active Directory is an Active Directory service developed by Microsoft. A cross-site scripting vulnerability exists in Microsoft Active Directory Federation Services, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to...

Multiple Blue Coat Systems SSL Visibility Appliance Product Session Fixation Vulnerabilities

Blue Coat Systems SSL Visibility Appliance SV800 and others are SSL visibility appliances from Blue Coat Systems, USA, that are at the heart of encrypted traffic management, providing visibility into SSL traffic and supporting the addition of SSL inspection capabilities to advanced threat...

Sendio ESP 'jsessionid' Information Disclosure Vulnerability

Sendio ESP Email Security Platform is a network appliance that provides anti-spam and anti-virus solutions for organizations from Sendio, USA. A security vulnerability exists in Sendio ESP versions prior to 7.2.4. Due to the presence of session identifiers in emails. A remote attacker can exploit...

PT-2015-6370

Name of the Vulnerable Software and Affected Versions Django versions 1.8.0 through 1.8.1 Description The issue is related to the session.flush function in the cached db backend, which does not properly flush the session. This allows remote attackers to hijack user sessions via an empty string in...

UBUNTU-CVE-2015-0213

Multiple cross-site request forgery CSRF vulnerabilities in 1 editcategories.html and 2 editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims...