357 matches found
CVE-2020-4252
IBM DOORS Next Generation (DNG/RRC) is affected by a cross-site scripting vulnerability (CVE-2020-4252) in the Web UI for multiple 6.x releases (notably 6.0.2, 6.0.6, 6.0.6.1). The underlying issue allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentia...
CVE-2019-4740
IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.6.1 (including 6.0.61) are affected by a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause is a Web UI XSS vulnerability; affected components...
CVE-2019-4746
CVE-2019-4746 affects IBM DOORS Next Generation (DNG/RRC) Web UI. According to the IBM bulletin, multiple cross-site scripting defects exist in DNG/RRC versions 6.0.2, 6.0.6, and 6.0.6.1 (and related RDNG/DNG variants), allowing an attacker to inject arbitrary JavaScript into the Web UI, potentia...
CVE-2019-4746
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4737
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Security Bulletin: Multiple cross-site scripting vulnerabilities affect IBM DOORS Next Generation
Summary There are multiple cross-site scripting defects that affect IBM DOORS Next Generation DNG/RRC Vulnerability Details CVEID: CVE-2019-4740 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
Liferay CE 6.0.2 Java Deserialization
Liferay CE 6.0.2 remote code execution via unsafe deserialization Recent assessments: theguly at March 02, 2020 5:11pm UTC reported: on 29th of january 2020 this github1 repo came up, with some newsfeed, speakin about a RCE via deserialization on Liferay 6.0.2 i’m aware that liferay is widely use...
CVE-2019-4495
IBM Jazz Reporting Service (JRS) versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6 and 6.0.6.1 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Th...
CVE-2019-11464
Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and...
CVE-2019-5590
CVE-2019-5590 affects Fortinet FortiWeb 6.0.2 and earlier. The root cause is that the URL part of the report message is not encoded, enabling Cross-Site Scripting (XSS) via HTML-formatted attack reports. Potential impact: attacker may cause client-side code execution in a user’s browser. Exploita...
Red Hat Keycloak Security Bypass Vulnerability (CNVD-2019-44531)
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security bypass vulnerability exists in Red Hat Keycloak versions prior to 6.0.2, which can be exploited by an attacker to conduct a...
Siemens SIMATIC S7-400 PN CPUs 6.0.1 and 6.0.2 ICMP Packets DOS
Binary data 720185.prm...
Directory traversal
Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/upload/FileUploadData.java mishandles a StringUtil.java call. This vulnerability enables regular users to write arbitrary files on the...
CVE-2018-19586
Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/upload/FileUploadData.java mishandles a StringUtil.java call. This vulnerability enables regular users to write arbitrary files on the...
CVE-2018-20212
bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...
Cross site scripting
bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...
CVE-2018-20212
bin/statistics in TWiki 6.0.2 allows cross-site scripting XSS via the webs parameter...
CVE-2018-1912
IBM DOORS Next Generation DNG/RRC 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
Cross site scripting
IBM DOORS Next Generation DNG/RRC 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...
CVE-2018-1912
IBM DOORS Next Generation DNG/RRC 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...