Cross site scripting

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in workingSet.jsp in IBM Eclipse Help System IEHS, as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6690

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

CVE-2013-6307: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

GLSA-201311-22 : Namazu: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-22 Namazu: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Namazu. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary code or cause a...

Namazu: Multiple vulnerabilities

Background Namazu is a full-text search engine intended for easy use. Description Multiple vulnerabilities have been discovered in Namazu. Please review the CVE identifiers referenced below for details. Impact A remote attacker could execute arbitrary code or cause a Denial of Service condition...

CVE-2013-4624

Multiple cross-site scripting XSS vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via 1 the site parameter to engines/manager.jsp, 2 the searchString parameter to administration/ in a search action, or the 3 username, 4 firstName,...

CVE-2013-4523

Cross-site scripting XSS vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message...

Cross site scripting

Cross-site scripting XSS vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...

CVE-2013-4573

CVE-2013-4573: XSS in the ZeroRatedMobileAccess extension for MediaWiki through index.php?to. Affected: MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, 1.21.x before 1.21.3. Root cause: input validation flaw in ZeroRatedMobileAccess enabling remote script/HTML injection. Impact: potential r...

PT-2013-6161

Name of the Vulnerable Software and Affected Versions Splunk versions prior to 5.0.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 5.0.6, update to version 5.0.6 or later to resolve the...

CVE-2013-6858

Multiple cross-site scripting XSS vulnerabilities in OpenStack Dashboard Horizon 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to 1 "Volumes" or 2 "Network Topology" page...

CVE-2013-3288

Cross-site scripting XSS vulnerability on the EMC RSA Data Protection Manager DPM appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the displaySystemError function in html/handleerror.php in LOCKON EC-CUBE 2.11.0 through 2.11.5 allows remote attackers to inject arbitrary web script or HTML by leveraging incorrect handling of error-message output...

CVE-2013-6175

EMC Document Sciences xPression CVE-2013-6175 describes multiple XSS flaws in xAdmin and xDashboard that could allow an authenticated user to inject script/HTML via input. Affected versions include 4.1 SP1 prior to Patch 47, 4.2 prior to Patch 26, and 4.5 prior to Patch 05. The issues are part of...

PT-2013-5960

Name of the Vulnerable Software and Affected Versions EMC Document Sciences xPression versions 4.1 SP1 before Patch 47 EMC Document Sciences xPression versions 4.2 before Patch 26 EMC Document Sciences xPression versions 4.5 before Patch 05 Description The issue allows remote attackers to inject...

PT-2013-6129

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description A cross-site scripting XSS issue exists in the Performance Provider component of SAP NetWeaver, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved vi...

CVE-2013-6819: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...