CVE-2014-5338

Multiple cross-site scripting XSS vulnerabilities in the multisite component in CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 renderstatusicons function in htmllib.py or 2 ajaxaction functio...

CVE-2014-5273

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 browse table page, related to js/sql.js; 2 ENUM editor page, related to...

PT-2014-6418

Name of the Vulnerable Software and Affected Versions Check MK versions prior to 1.2.4p4 Check MK versions prior to 1.2.5i4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. This is related to the multisite component,...

CVE-2014-3594: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

Cross site scripting

Cross-site scripting XSS vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 r88, as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...

CVE-2014-5343

CVE-2014-5343 is an XSS vulnerability reported in Feng Office, allowing remote attackers to inject arbitrary script/HTML via the client Name field. The NVD entry lists impacts as: confidentiality none, integrity partial, availability none, with a base score 4.3 (Medium). Connected documents corro...

UBUNTU-CVE-2014-3594

Cross-site scripting XSS vulnerability in the Host Aggregates interface in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name...

Cross site scripting

Cross-site scripting XSS vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3898

CVE-2014-3898 affects Fujitsu ServerView Operations Manager (V5.00.09–V6.30.05). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s browser. Remediation guidance in connected sources a...

PT-2014-5587

Name of the Vulnerable Software and Affected Versions Fujitsu ServerView Operations Manager versions 5.00.09 through 6.30.05 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 5.00.09...

Cross site scripting

Cross-site scripting XSS vulnerability in Master Data Services MDS in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0889

Multiple cross-site scripting XSS vulnerabilities in IBM Atlas Suite aka Atlas Policy Suite, as used in Atlas eDiscovery Process Management through 6.0.3, Disposal and Governance Management for IT through 6.0.3, and Global Retention Policy and Schedule Management through 6.0.3, allow remote...

Cross site scripting

Cross-site scripting XSS vulnerability in Homepage Decorator PerlMailer 3.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4710

Cross-site scripting XSS vulnerability in zerouseraccount.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field...

CVE-2014-3551

Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...

CVE-2014-3549

Cross-site scripting XSS vulnerability in the getdescription function in lib/classes/event/userloginfailed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attem...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted 1 error or 2 success message for a scheduled task...

CVE-2014-3544

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...

PT-2014-3923

Name of the Vulnerable Software and Affected Versions IBM Atlas Suite versions prior to 6.0.4 IBM Atlas eDiscovery Process Management versions prior to 6.0.4 IBM Disposal and Governance Management for IT versions prior to 6.0.4 IBM Global Retention Policy and Schedule Management versions prior to...