CVE-2015-5519

Cross-site scripting XSS vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php...

CVE-2015-5521

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

CVE-2015-5520

Cross-site scripting XSS vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user account, which is not properly handled when deleting an account...

CVE-2015-5521

Summary: CVE-2015-5521 affects BlackCat CMS v1.1.2 and is a cross-site scripting (XSS) vulnerability exploitable via the name parameter in the backend/groups/index.php endpoint. The root cause is improper handling/sanitization of the name field in the group-creation flow, enabling injection of ar...

Cross site scripting

Cross-site scripting XSS vulnerability in the Active Content Filtering component in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06 allows remote attackers to inject arbitrary web script or...

CVE-2015-4272

Multiple cross-site scripting XSS vulnerabilities in the ccmivr page in Cisco Unified Communications Manager formerly CallManager 10.52.10000.5 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCut19580...

Cross site scripting

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2967

Cross-site scripting XSS vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2969

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

CVE-2015-4260

Cross-site scripting XSS vulnerability in Cisco Hosted Collaboration Solution 10.61 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862...

Cross-Site Scripting Vulnerabilities in Multiple ESRI Products

ESRI ArcGIS is a set of geographic information system GIS based on SOA architecture from Environmental Systems Research Institute ESRI, which can share GIS resources such as 2D and 3D maps, address locators, spatial databases, and geoprocessing tools as a service across an enterprise or across th...

CVE-2015-5460

Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...

Cross site scripting

Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...

CVE-2015-5460

Snorby 2.6.2 is affected by an HTML/XSS vulnerability in the server-side template app/views/events/_menu.html.erb. The issue allows remote attackers to inject arbitrary HTML/script via the title (cls.name) field when creating a classification, due to insufficient input handling. The vulnerability...

CVE-2015-5460

Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...

CVE-2015-5455

Cross-site scripting XSS vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to install/...