CVE-2016-7884

Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site scripting attacks...

CVE-2016-5987

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message...

CVE-2016-5987

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message...

CVE-2016-5905

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5905

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5987

CVE-2016-5987 affects IBM Maximo Asset Management core versions 7.6, 7.5, and 7.1 (and related IBM products built on those cores). A remote attacker could obtain sensitive information by sending a crafted HTTP request that triggers the construction of a runtime error message, leading to an inform...

CVE-2016-5905

IBM Maximo Asset Management is affected by CVE-2016-5905: cross-site scripting in the Maximo Asset Management core product (versions 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2). The vulnerability allows remote authenticated users to inject arbitrary web script or HTML via unspecified vect...

CVE-2016-5987

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message...

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

Information disclosure

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability

Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...

Fast Breakfast Scratchers Bonus Packs Have Design Flaws

Fast Breakfast App is a mobile service that can help you buy breakfast. A design vulnerability exists in the Fast Breakfast Scratchers module. Due to lax checking in the program design process, an attacker can change the amount of red packets by exploiting the vulnerability, resulting in the loss...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-11328)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-10505)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.5 and 7.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript code into the...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2016-10463)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A security vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to submit a special request to obtain sensitive information...

ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure Vulnerability

Exploit for jsp platform in category web applications Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions...