27443 matches found
CVE-2016-1226
Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-1197
Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...
Cross site scripting
Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...
CVE-2016-1226
Cross-site scripting XSS vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-7775
CVE-2015-7775 is an XSS vulnerability in Cybozu Garoon 4.0.3 that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors; it is noted as a different vulnerability from CVE-2016-1197. The connected records also include CVE-2016-1197, an XSS flaw in Cybozu Garoon ...
CVE-2016-1226
CVE-2016-1226 affects Trend Micro Internet Security 8 and 10 and is described as a Cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script or HTML via unspecified vectors. Connected sources (e.g., JVN and OpenVAS entries) confirm an Arbitrary Script Execution...
CVE-2016-1396
Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...
CVE-2016-1431
Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...
CVE-2016-4164
Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4159
Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4164
Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
nGrinder Cross-Site Scripting Vulnerability
nGrinder is an easy-to-manage and use performance testing system based on Grinder load testing framework. A cross-site scripting vulnerability exists in nGrinder version 3.3. The vulnerability allows attackers to inject arbitrary Web script or HTML...
CVE-2016-3670
The CVE-2016-3670 entry describes a stored XSS in Liferay through the Profile Search feature. According to the provided materials, the vulnerability arises when a malicious payload is placed in the FirstName field during user creation, which can be exploited via the Profile Search function (User ...
CVE-2016-3670
Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...
CVE-2016-2078
Cross-site scripting XSS vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter...
Apache Struts Security Update (S2-028, S2-030, S2-034)
Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...