Juniper ATP Email Collectors XSS

The vulnerability of the Email Collectors component in the Juniper ATP intrusion prevention system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the uploaded page and gain access to protected da...

Cisco Wireless LAN Controllers Web Interface Arbitrary Code Injection

The vulnerability of the web interface of microprogramming software for Cisco Wireless LAN Controllers of the 5500 series is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page via a...

CVE-2006-0172

Cross-site scripting XSS vulnerability in the file manager utility in Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting...