865 matches found
Trend Micro OfficeScan Elevation of Privilege Vulnerability
Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A security vulnerability exists in Trend Micro OfficeScan version 11.0 SP1 and XG. The vulnerability can be exploited by an attacker to elevate account privileges with guest or higher privileges...
CVE-2018-10509
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability...
CVE-2018-10507
CVE-2018-10507 concerns Trend Micro OfficeScan (11.0 SP1 and XG) where an attacker with administrator privileges can bypass or render the Unauthorized Change Prevention feature inoperable. The vulnerability affects OfficeScan XG v11.0 (and related SP1) and enables bypass of protection mechanisms ...
CVE-2018-6495
Cross-Site Scripting XSS in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to...
Cross site scripting
Cross-Site Scripting XSS in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to...
IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2018-09160)
IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site...
CVE-2018-1413
CVE-2018-1413 affects IBM Cognos Analytics 11.0, with cross-site scripting via the Web UI that could lead to credentials disclosure in a trusted session. IBM IBM Cognos Bulletins/NTAP references confirm the vulnerability and list 11.0.11.0 as the fixed release. Remediation: upgrade to IBM Cognos ...
CVE-2016-9711
CVE-2016-9711 affects IBM Cognos Analytics 11.0 (Predictive Solutions Foundation). The issue is an information-disclosure vulnerability where detailed error messages reveal sensitive information about the application and database, potentially aiding an attacker in further attacks. IBM’s bulletin ...
ZOHO ManageEngine EventLog Analyzer Cross-Site Scripting Vulnerability (CNVD-2018-06773)
ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. The software is capable of network-wide hosts, servers, network equipment and a variety of application service systems and other logs generated by the comprehensive collecti...
PT-2018-17108 · Reprise · Reprise License Manager
Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 11.0 Description: A Path Traversal issue allows an attacker to access files on the server's file system by modifying a field in the web request. Specifically, by specifying a pathname in the lf parameter to the...
Authentication flaw
IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857...
CVE-2017-1783
IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication. IBM X-Force ID: 136857...
CVE-2017-1779
IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user. IBM X-Force ID: 136824...
CVE-2017-1784
CVE-2017-1784 affects IBM Cognos Analytics 11.0. The issue allows a local user to read results stored in temporary files containing highly sensitive information. The root cause is described in IBM’s bulletin associated with Cognos Analytics 11.0.x, noting this vulnerability alongside others (CVE-...
CVE-2017-1779
IBM Cognos Analytics 11.0.x has a vulnerability where cached credentials are stored locally and could be obtained by a local user. The issue affects IBM Cognos Analytics versions 11.0.0.0 through 11.0.7.0. Root cause: credentials caching without sufficient protection allows local access to cached...
CVE-2017-1783
IBM Cognos Analytics 11.0.x is affected by CVE-2017-1783: a local user could modify parameters via the Cognos Analytics menus without authentication. The advisory (IBM D6B9…) assigns CVSS v3.0 vector CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N with base score 4.0. Affected versions are 11.0.0.0 ...
Kentico CMS 11.0 - Buffer Overflow Vulnerability
Exploit for windows platform in category dos / poc Document Title: =============== Kentico CMS v11.0 - Stack Buffer Overflow Vulnerability CVE-ID: ======= CVE-2018-5282 Vulnerability Class: ==================== Buffer Overflow Current Estimated Price: ======================== 2.000€ - 3.000€...
CVE-2018-5282
Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, reading XML documents is...
Citrix NetScaler Multiple Vulnerabilities (CTX230238, CTX230612)
The remote Citrix NetScaler device is affected by multiple vulnerabilities in the Application Delivery Controller ADC and the Gateway Management Interface. Please refer to advisories CTX230238 and CTX230612 for more information. C Tenable Network Security, Inc. include'compat.inc'; if description...