1231 matches found
CVE-2019-3489
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
PT-2019-16596
Name of the Vulnerable Software and Affected Versions Micro Focus Content Manager versions 9.1 through 9.3 Description An unauthenticated file upload issue has been identified in the Web Client component when configured to use the ADFS authentication method. This could be exploited by an...
CVE-2019-3489: Unrestricted Upload of File with Dangerous Type
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
Suspicious JavaScript Obfuscation Chunks Technique
Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Obfuscated exploits might not be detected by IDS and IPS systems, thus allowing attackers to successfully attack the target web client...
Cross-site scripting vulnerability in Microsoft Dynamics NAV 2013 R2 Web client
Cross-site scripting vulnerability in Microsoft Dynamics NAV 2013 R2 Web client Summary A cross-site scripting vulnerability exists when Microsoft Dynamics NAV 2013 R2 doesn't properly sanitize specially crafted web requests on an affected Dynamics NAV Web client. An authenticated attacker could...
Basler IP Camera Remote Detection
Detects the installed version of Basler IP Camera. This script sends an HTTP GET request and tries to ensure the presence of Basler IP Camera. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Cross-Site Scripting Flaw in Apache ActiveMQ Threatens Web Visitors
Researchers have found a cross-site scripting XSS flaw in Apache ActiveMQ that could enable a remote attacker with no privileges to launch an array of attacks against visitors to compromised websites. The vulnerability CVE-2018-8006 was disclosed today and impacts ActiveMQ versions earlier than...
CVE-2018-1999016
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
Cross site scripting
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-1999016
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-1999016
CVE-2018-1999016 affects Pydio 8.2.0 and earlier, with a Cross Site Scripting vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php (line 48) and ./core/vendor/dapphp/securimage/examples/test.mysql.static.php (lines 114, 118). An unauthenticated remote attacker could manipula...
PT-2018-15195
Name of the Vulnerable Software and Affected Versions Pydio versions 8.2.0 and earlier Description The issue is related to a Cross Site Scripting XSS vulnerability that can be exploited by an unauthenticated remote attacker. This can result in the manipulation of the web client via XSS code...
CVE-2018-2936
Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Unspecified Vulnerability in Oracle Communications Messaging Server
Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...
CVE-2018-2936: Undefined Security Weakness
Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Veeam Backup & Replication plug-in missing in vSphere HTML5 Web Client after upgrade to VMware vSphere 6.7
Challenge After installing Veeam 9.5 Update 3a and simultaneous upgrade of vSphere from 6.5 to 6.7 Veeam vSphere Web Client Plugin might stop working for vSphere HTML5 Web Client. However it is still operational in vSphere Flash/Flex Web Client. The issue is only reproducible in case the plugin w...
Mirasys DVMS Workstation Gateway Path Traversal Vulnerability
Mirasys DVMS Worlstation is a surveillance video management system from the Finnish company Mirasys, of which Gateway is a gateway. A path traversal vulnerability exists in Mirasys DVMS Workstation 5.12.6 and earlier versions of Gateway. A remote attacker can use the Web Client webserver to...
Mirasys DVMS Workstation 5.12.6 Path Traversal
Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
