Cross site scripting

Cross-site scripting XSS vulnerability in the Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different...

CVE-2016-0350

IBM Jazz Reporting Service (JRS) Report Builder and Data Collection Component (DCC) is affected by CVE-2016-0350 (XSS) documented in JRS 5.x up to 5.0.2 ifix016 and 6.x up to 6.0.1 ifix005. A remote authenticated user can supply a crafted URL to inject arbitrary script/HTML in the victim’s browse...

IBM Jazz Reporting Service (JRS) Cross-Site Scripting Vulnerability (CNVD-2016-04651)

IBM Jazz Reporting Service is an optional component of IBM Rational Reporting for Development Intelligence. IBM Jazz Reporting Service JRS has a cross-site scripting vulnerability in the Report Builder and Data Collection Component DCC implementations. A remote attacker could exploit this...

CVE-2016-4508

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4508

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in Mozilla Firefox, Firefox ESR, and Thunderbird due to improper initialization of memory intended for displaying GIFs. Exploitation of this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted...

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the integrity of protected information

XSS Cross-Site Scripting in Adobe AIR allows malicious individuals to inject any web script or HTML code remotely...

The vulnerability of Adobe Reader software allows a malicious individual to compromise the integrity of protected information.

XSS attacks in Adobe Reader for OS X allow malicious individuals to inject any web script or HTML code...

CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

CVE-2016-5099

Cross-site scripting XSS vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2 allows remote attackers to inject arbitrary web script or HTML via special characters that are mishandled during double URL decoding...

CVE-2016-5099

CVE-2016-5099 pertains to a cross-site scripting (XSS) vulnerability in phpMyAdmin. The issue affects phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6.2, allowing remote attackers to inject arbitrary web script or HTML via characters mishandled during double URL decoding. Public advisories i...

QNAP QTS File Station XSS Vulnerability

QNAP QTS File Station is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Option CloudGate Insecure Direct Object References And XSS Vulnerabilities

Option CloudGate is prone to cross site scripting and insecure direct object reference authorization bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0221

CVE-2016-0221 is an IBM Cognos TM1 cross-site scripting (XSS) vulnerability. A remote authenticated user can inject arbitrary web script or HTML via a crafted URL in affected IBM Cognos BI/TM1 deployments. Affected versions include IBM Cognos TM1 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 bef...

Cross site scripting

Cross-site scripting XSS vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...