tampabay.wateratlas.usf.edu XSS vulnerability

Vulnerable URL: http://www.tampabay.wateratlas.usf.edu/coastal/waterquality.asp?wbodyatlas=gulf=1/-///'/"//--...

Apache Atlas Information Disclosure Vulnerability

Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. An information disclosure vulnerability exists in Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1. An attacker could exploit the vulnerability to obtain sensitive informatio...

Directory Traversal

Apache Atlas is vulnerable to directory traversal attacks. The attacks can be triggered because it does not properly handle URI input from the users, allowing an unauthorized access to webapp directory by using direct URIs such as /js or /img...

Cross-Site Scripting (XSS)

atlas-dashboardv2 is vulnerable to reflected cross-site scripting XSS attacks. The search function does not sanitize the search queries that are passed to the application, allowing a malicious user to inject and execute arbitrary javascript...

Cross Frame Scripting

atlas-dashboardv2 is vulnerable to cross frame scripting. The library allows the use of external frames on the index page, allowing a malicious user to inject and execute arbitrary javascript via an iframe...

Information Disclosure

atlas-webapp is vulnerable to information disclosure. The library prints sensitive information in its stack trace error logs. A malicious user can then access sensitive information stored on these logs...

Insecure Cookies

atlas-webapp is vulnerable to insecure cookies. The library uses a predictable cookie name in the webapp. This can allow a malicious user to access sensitive data contained in the cookies...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

Cross site request forgery (csrf)

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

CVE-2016-6100

CVE-2016-6100 affects IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management (components of IBM Atlas Policy Suite 6.0.3). The vulnerability is a cross-site request forgery that could allow an attacker to perform malicious and unauthorized actions tr...

CVE-2016-6100: Cross-Site Request Forgery (CSRF)

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...

Schnee & mehr Der Atlas 2016 - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Schnee & mehr Der Atlas 2016 published at the 'play' market has multiple vulnerabilities...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 Action or 2 Form parameter to aeon.dll...

CVE-2014-7290

Multiple cross-site scripting XSS vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 Action or 2 Form parameter to aeon.dll...

CVE-2014-7290

CVE-2014-7290 is an XSS vulnerability in Atlas Systems Aeon 3.5 and 3.6. The issue allows remote attackers to inject arbitrary scripts via the Action or Form parameter to aeon.dll. Affected product: Aeon (special collections circulation software). Root cause: cross-site scripting vulnerability in...

CVE-2014-7290

Multiple cross-site scripting XSS vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 Action or 2 Form parameter to aeon.dll...

CVE-2014-7290: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 Action or 2 Form parameter to aeon.dll...

Atlas Systems Aeon 3.5 / 3.6 Cross Site Scripting

CVE-2014-7290 Atlas Systems Aeon XSS Cross-Site Scripting Vulnerability Exploit Title: Atlas Systems Aeon XSS Vulnerability Product: Aeon Vendor: Atlas Systems Vulnerable Versions: 3.6 3.5 Tested Version: 3.6 Advisory Publication: Nov 12, 2014 Latest Update: Nov 12, 2014 Vulnerability Type:...