27695 matches found
CVE-2016-2214
Huawei Agile Controller-Campus contains a cross-site scripting (XSS) vulnerability in a portal authentication page. Affected software is before V100R001C00SPC319. Remote attackers could inject arbitrary web script or HTML via unknown vectors, potentially impacting user sessions. Huawei HWPSIRT ad...
CVE-2016-1309
Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuy01843...
CVE-2016-1309
Cisco WebEx Meetings Server 2.5.1.5 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient input validation in the web framework code. An unauthenticated, remote attacker could exploit these flaws by enticing a user to a malicious link or intercepting requests, ena...
CVE-2016-1305
Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML entities, aka Bug ID CSCux15511...
CVE-2016-1311
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
CVE-2016-1306
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
Cross site scripting
Cross-site scripting XSS vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...
CVE-2016-1310
Cross-site scripting XSS vulnerability in Cisco Unity Connection 11.50.199 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033...
CVE-2016-1311
Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...
WordPress Universal Analytics Plugin <= 1.3.0 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Cross site scripting
Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...
CVE-2015-7536
Cross-site scripting XSS vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts...
WordPress Ninja Forms Plugin Cross-Site Scripting (CVE-2015-2220)
Multiple cross-site scripting vulnerabilities exist in WordPress Ninja Forms Plugin. Successful exploitation of these vulnerabilities would allow remote attackers to inject an arbitrary web script into the affected system...
CVE-2016-1144
Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1143
Cross-site scripting XSS vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...