Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Monitoring Application

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Monitoring Application. The...

Cisco Unified Computing System Director Cross-Site Scripting Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...

Juniper Networks IDP Appliance Configuration Manager Cross-Site Scripting Vulnerability

Juniper Networks IDP is a suite of intrusion detection defense solutions. A cross-site scripting vulnerability exists in Juniper Networks IDP Appliance Configuration Manager due to a failure to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary scrip...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03606)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Multiple cross-site scripting vulnerabilities in Symantec Web Gateway (CNVD-2017-03683)

Symantec Web Gateway is a spam filter that combines anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec USA. Multiple cross-site scripting vulnerabilities exist in Symantec Web Gateway that stem from a failure to adequately validate user input...

Soruly whatanime.ga Cross-Site Scripting Vulnerability

Soruly whatanime.ga is a program developed by soruly to search for animated scenes by image. Soruly whatanime.ga suffers from a cross-site scripting vulnerability that stems from the program failing to properly validate user-supplied input. When an unsuspecting user browses the affected site, an...

Palo Alto Networks PAN-OS HTML Injection Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execu...

Multiple Cross-Site Scripting Vulnerabilities in SonicDICOM PACS

SonicDICOM is a PACS software from JIUN Corporation that combines the functionality of DICOM with a web browser based on DICOM Viewer. SonicDICOM has multiple stored cross-site scripting vulnerabilities. The vulnerabilities stem from input passed to multiple API POST parameters failing to validat...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2017-01995)

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, as the program fails to adequately validate user input. An attacker could exploit this...

Drupal Search API Sorts Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.The Search API Sorts module is one of the modules that provides custom sorting and global sort blocks for the Search API. A cross-site scripting vulnerability exists in the Drupal Searc...

rhev-m-4: Fails to validate existing expired passwords when changing a password

When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts...

CVE-2016-9795

The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA...

Ghost 'Your profile' page HTML injection vulnerability

Ghost is an open source, controlled platform for building and running modern online publishing. Ghost suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execute specially crafted HTML and script cod...

Novell Open Enterprise Server Directory Traversal Vulnerability

The Novell Open Enterprise Server OES is an enterprise-class server from the American company Novell that provides network services, file and print services, and network management capabilities. A directory traversal vulnerability exists in Novell Open Enterprise Server that stems from a failure ...

Cisco WebEx Meetings Server Remote Code Execution Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A remote command execution vulnerability exists in Cisco WebEx Meetings Server that stems from a failure to properl...

Symphony cross-site scripting vulnerability (CNVD-2017-01078)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extension and so on. A cross-site scripting attack vulnerability exists in Symphony CMS, which stems from a failure to properly validate user input. An attacker could...

CVE-2016-5197

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page...

Atlassian Confluence Jira 5.9.12 - Persistent Cross-Site Scripting Vulnerability

Tempest Security Intelligence Advisory ADV-3/2016 - Atlassian Confluence version 5.9.12 is vulnerable to persistent cross site scripting because it fails to securely validate user controlled data, thus making it possible for an attacker to supply crafted input in order to harm users. The bug occu...

Multiple Japan Pension Service Products Arbitrary Code Execution Vulnerabilities

Japan Pension Service Specification check program, etc. are the software of Japan Pension Service. An arbitrary code execution vulnerability exists in multiple Japan Pension Service products where the program fails to validate user-submitted input. An attacker could exploit this vulnerability to...

IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability

IBM Kenexa LMS on Cloud is a full-featured, configurable, enterprise-grade, social Learning Management System LMS that integrates social networking, collaboration, and knowledge sharing capabilities. The software provides interactive elements that support users in evaluating learning content and...