CVE-2016-9271: Improper Neutralization of Input During Web Page Generation

Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the help search feature...

PT-2019-7855

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.7.x through 5.7.5 Cloudera Manager versions 5.8.x through 5.8.3 Cloudera Manager versions 5.9.x through 5.9.0 Description The issue allows for cross-site scripting XSS in the help search feature. Recommendations For...

PT-2019-6670

Name of the Vulnerable Software and Affected Versions Drupal Views Bulk Operations VBO module versions 6.x-1.0 through 6.x-1.10 Description The issue arises from the improper escaping of vocabulary help in the Drupal Views Bulk Operations VBO module when user tagging is enabled and the "Modify no...

CVE-2011-3373: Improper Neutralization of Input During Web Page Generation

Drupal Views Builk Operations VBO module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-sit...

Microsoft Outlook for Android Bug Opens Door to XSS

Users of the Microsoft Outlook for Android app should update their apps to avoid a range of attacks. The bug CVE-2019-1460 would allow an attacker to perform cross-site scripting XSS attacks on the affected systems and run scripts in the security context of the current user, according to...

Open-source Ticket Request System Denial of Service Vulnerability

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...

Unspecified Vulnerability in Open-source Ticket Request System Help Desk (CNVD-2019-42577)

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone, email, etc. into different queues and service levels, and service personn...

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

PT-2019-15668

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 9.5 Description The issue allows for cross-site scripting XSS in the target/locales/tr-TR/help/index.htm endpoint via the fileName parameter. This could potentially lead to malicious script execution...

CVE-2019-18793: Improper Neutralization of Input During Web Page Generation

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

Description of the security update for Office Online Server: November 12, 2019

None None...

MS15-081: Description of the security update for Office 2013: August 11, 2015

MS15-081: Description of the security update for Office 2013: August 11, 2015 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see...

Oracle E-Business Suite Login Help DoS

The vulnerability of the Login Help sub-component of the Oracle Application Object Library, a component of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions using HTTP...

winrar 5.80 - XML External Entity Injection Exploit

Exploit Title: winrar 5.80 - XML External Entity Injection Exploit Author: albalawi Vendor Homepage: https://win-rar.com/fileadmin/winrar-versions/winrar-x64-58b2.exe Version: 5.80 Tested on: Microsoft Windows Version 10.0.18362.418 64bit POC 1- python -m SimpleHTTPServer listens Port 8000 2- ope...

CVE-2019-3027

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

CVE-2019-3027

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

CVE-2019-3027

The CVE-2019-3027 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (AOL), Login Help component. Affected versions are 12.2.5–12.2.9. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, potentially enabling partial denial of serv...

CVE-2019-3027: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

PT-2019-3620

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient access control in the Login Help component of Oracle Application Object Library, allowing an unauthenticated attacker with network access v...