728 matches found
CVE-2018-11569
CVE-2018-11569 affects Eventum, specifically the PHP file list handling in 3.5.0 (Controller/ListController.php). The issue is described as a deserialization of untrusted data vulnerability, with a confirmed remediation in Eventum 3.5.2. Connected documents consistently identify the affected prod...
CVE-2018-11569
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2...
HPE 3PAR StoreServ Management Console Authorization Bypass Vulnerability (CNVD-2019-28115)
The HPE 3PAR StoreServ Management Console SSMC is the HPE 3PAR management and reporting console that provides converged file and block management on HPE 3PAR StoreServ storage systems. A remote authorization bypass vulnerability exists in HPE 3PAR StoreServ Management Console 3.5.0. An attacker...
HPE 3PAR StoreServ Management Console Cross-Site Scripting Vulnerability
The HPE 3PAR StoreServ Management Console SSMC is the HPE 3PAR management and reporting console that provides converged file and block management on HPE 3PAR StoreServ storage systems. A cross-site scripting vulnerability exists in HPE 3PAR StoreServ Management Console 3.5.0. An attacker could...
HPE 3PAR StoreServ Management Console Script Injection Vulnerability
The HPE 3PAR StoreServ Management Console SSMC is the HPE 3PAR management and reporting console that provides converged file and block management on HPE 3PAR StoreServ storage systems. A script injection vulnerability exists in HPE 3PAR StoreServ Management Console 3.5.0. An attacker could exploi...
CVE-2019-1020007
Dependency-Track before 3.5.1 allows XSS...
AZL-44634 CVE-2019-10744 affecting package js-jquery 3.5.0-4
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...
Eventum Cross-Site Request Forgery Vulnerability
Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site request forgery vulnerability exists in the htdocs/manage/users.php file in Eventum version 3.5.0, which stems from a WEB application that does not adequately...
Eventum Cross-Site Scripting Vulnerability (CNVD-2019-22273)
Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the htdocs/switch.php file in Eventum version 3.5.0, which stems from a lack of proper validation of client-side data in the...
Eventum Cross-Site Scripting Vulnerability (CNVD-2019-39381)
Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/list.php file in Eventum version 3.5.0. The vulnerability stems from the WEB application failing to properly...
CVE-2018-12628
An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges...
CVE-2018-12627
An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the shownotificationlistissues or showauthorizedissues parameter...
CVE-2018-12625
An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter...
CVE-2018-12622
An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the fieldname parameter...
CVE-2018-12627
An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the shownotificationlistissues or showauthorizedissues parameter...
CVE-2018-12626
An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...
CVE-2018-12623
An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the currentpage parameter...
CVE-2018-12628
An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges...