89 matches found
CVE-2018-1433
VULNERABILITY DETAIL (CVE-2018-1433): IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem family (versions 6.1–8.1.x) expose a web handler /DownloadFile that does not require authentication, enabling reading arbitrary files from the system. This is confirmed acros...
Cross site request forgery (csrf)
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433...
CVE-2017-1433
CVE-2017-1433 affects IBM WebSphere MQ 7.5 (7.5.0.0–7.5.0.8), 8.0 (8.0.0.0–8.0.0.7), and 9.x (9.0.0.0–9.0.0.1) where an authenticated user can insert messages with a corrupt RFH header into a channel, causing the channel process to restart and potentially impact availability. The issue is due to ...
CVE-2013-1433
CVE-2013-1433 is rejected/not used; this candidate is not associated with any vulnerability.
CVE-2014-1433
CVE-2014-1433 is rejected and not associated with an active vulnerability entry.
RoundCube Webmail mail <1.0.5 body stored XSS（CVE-2015-1433）
RoundCube Webmail is a foreign use of a wide an open source php e-mail system, the meaning is still quite large. roundcube webmail official website: , download the latest version. /program/lib/Roundcube/rcubewashtml.php this file is actually a rich text filter class class rcubewashtml it. roundcu...
openSUSE Security Update : pdns (openSUSE-2016-1433)
This update for pdns fixes the following issues : - maliciously crafted packets could cause pdns to trigger an assertion and thus lead to DoS CVE-2015-5311, boo954402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2016-1433
Cisco IOS XR (6.0 and 6.0.1) running on Cisco NCS 6000 devices is affected by a denial-of-service vulnerability in OSPFv3 packet processing (Bug CSCuz66289). Exploitation can trigger an OSPFv3 process reload via specially crafted OSPFv3 packets, leading to a limited DoS condition on the device. T...
Debian DLA-613-1 : roundcube security update
Multiple CSRF and XSS issues allow remote attackers to hijack the authentication and execute roundcube operations without the consent of the user. In some cases, this could result in data loss or data theft. CVE-2014-9587 Multiple cross-site request forgery CSRF vulnerabilities in allow remote...
DLA-613-1 roundcube - security update
Bulletin has no description...
openSUSE Security Update : roundcubemail (openSUSE-2015-148)
roundcubemail was updated to version 1.0.5 to fix one security issue. This security issue was fixed : - CVE-2015-1433: program/lib/Roundcube/rcubewashtml.php in Roundcube before 1.0.5 did not properly quote strings, which allowed remote attackers to conduct cross-site scripting XSS attacks via th...
Fedora Update for roundcubemail FEDORA-2015-1772
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for roundcubemail FEDORA-2015-1761
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1433
program/lib/Roundcube/rcubewashtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting XSS attacks via the style attribute in an email...
CVE-2015-1433
CVE-2015-1433 affects Roundcube (Roundcube Webmail) where the file program/lib/Roundcube/rcube_washtml.php mishandles quoting in the HTML style attribute, enabling remote XSS via email content. The vulnerability arises from incorrect quotation logic during sanitization of the style HTML attribute...
CVE-2014-4684
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433...
Design/Logic Flaw
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433...