1231 matches found
CVE-2018-10939
Zimbra Collaboration Suite (ZCS) Web Client (ZWC) is affected by a persistent XSS issue in the ZWC component when used with ZCS versions 8.8.x before 8.8.8.Patch4 and 8.7.x before 8.7.11.Patch4. The vulnerability arises via a crafted contact group, enabling an attacker to inject arbitrary web scr...
PT-2018-10196
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions 8.7 through 8.7.11.Patch3 and versions 8.8 through 8.8.8.Patch3 Description The issue is related to a Persistent XSS in the Zimbra Web Client ZWC via a contact group. Recommendations For versions 8.7 through...
CVE-2018-10939: Improper Neutralization of Input During Web Page Generation
Zimbra Web Client ZWC in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group...
CVE-2018-10241
A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application with a NULL pointer dereference via a specially crafted URL beginning with the /Web%20Client/ substring...
PT-2018-9779
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.1.6 HFv1 Description: A denial of service issue allows an authenticated user to crash the application with a NULL pointer dereference via a specially crafted URL beginning with the "/Web Client/"...
See how I found to Have a cloud storage platform session mechanisms of vulnerability-vulnerability warning-the black bar safety net
! Recently in contrast to cloud storage solutions, I was surprised to find that many companies are still offering unlimited cloud data storage service solution, like Have the company that such note and don't Have a format specification confusion, and Have the company designed for individuals,...
The vulnerability of the Saperion Web Client web application lies in its lack of access control mechanisms, which allows attackers to execute arbitrary code.
The vulnerability of the Saperion Web Client web application is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges remotely...
How to Change Veeam ONE Web Client Port
Purpose This article documents the procedure for changing the port used by the Veeam ONE Web Client, which by default is 1239. Solution Desktop Shortcut Not Automatically Updated This procedure does not update the Veeam ONE Web Client shortcut on the desktop C:\Users\Public\Desktop. Part 1: Updat...
uTorrent Users Warned of Remote Code Execution Vulnerability
Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...
CVE-2018-2364
SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting XSS vulnerability...
CVE-2018-6292
Remote Code Execution in Saperion Web Client version 7.5.2 83166...
CVE-2018-6293
Arbitrary File Read in Saperion Web Client version 7.5.2 83166...
Remote code execution
Remote Code Execution in Saperion Web Client version 7.5.2 83166...
Design/Logic Flaw
Arbitrary File Read in Saperion Web Client version 7.5.2 83166...
CVE-2018-6292
Remote Code Execution in Saperion Web Client version 7.5.2 83166...
CVE-2018-6293
Arbitrary File Read in Saperion Web Client version 7.5.2 83166...
CVE-2018-6293
Hyland Saperion Web Client (v7.5.2 83166) contains an Arbitrary File Read vulnerability. The CVE-2018-6293 entry is supported by multiple connected documents (e.g., CNVD and NVD) that describe information disclosure via reading arbitrary files. CVSS metrics indicate Confidentiality impact HIGH (C...
CVE-2018-6292
CVE-2018-6292 affects Saperion Web Client version 7.5.2 (build 83166). The NVD entry documents a Remote Code Execution with network attack vector, low complexity, no privileges required, and no user interaction, leading to high impact on confidentiality, integrity, and availability. CVSSv3.0 base...
