CVE-2016-3999

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104552 and 104703...

CVE-2016-3404

Technical details for CVE-2016-3404 are not publicly available in the provided documents. The records confirm an unspecified vulnerability in Zimbra Collaboration before 8.7.0 but do not include affected components, exploit vectors, impacts, or fixes. Monitor for updates.

CVE-2016-3999

Zimbra Collaboration (before 8.7.0) is affected by multiple cross-site scripting (XSS) vulnerabilities. The validated connected sources identify the root cause as failure to sanitize user-supplied input, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Aff...

CVE-2016-3402

CVE-2016-3402 concerns Zimbra Collaboration Suite prior to 8.7.0. OpenVAS notes multiple vulnerabilities in Zimbra

CVE-2016-3415

CVE-2016-3415 affects Zimbra Collaboration Suite prior to 8.7.0, with a deserialization vulnerability exploitable via unspecified vectors (bug 102276). The NVD entry notes a high-severity impact (CVSS‑3.0: 9.1, NETWORK attack, no user interaction required; C and I HIGH, A NONE) and a Medium CVSS‑...

CVE-2016-3410

CVE-2016-3410 affects Zimbra Collaboration Suite prior to 8.7.0, with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (bugs 103956, 103995, 104475, 104838, 104839). Public sources (NVD, CNVD, OpenVAS) describe impact as cross...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

Design/Logic Flaw

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

CVE-2017-2957 is an Adobe Acrobat/Reader use-after-free vulnerability in the JavaScript engine (collaboration functionality) that could lead to arbitrary code execution. Affected products and versions include Acrobat/Reader on Windows and macOS: 15.020.20042 and earlier, 15.006.30244 and earlier,...

Box.com Plugs Account Data Leakage Flaw

Box.com has changed the way it handles publicly shared accounts and folders after a researcher found confidential documents and data belonging to Box.com users via Google, Bing and other search engines. While Box.com maintains this is a case of its customers unintentionally over-sharing, it says ...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (cisco-sa-20161207-pca)

Cisco Prime Collaboration Assurance is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

Cross site scripting

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

CVE-2016-9200

Cisco Prime Collaboration Assurance is affected by an XSS vulnerability in its web framework code. The issue allows an unauthenticated, remote attacker to inject scripts via web input due to insufficient input validation, potentially impacting users of the web interface. Affected releases include...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2016-12549)

Cisco Prime Collaboration Assurance is a video and voice services solution. A cross-site scripting vulnerability in Cisco Prime Collaboration Assurance allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data, can obtain...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. The vulnerability is due to insufficient input validation of some parameters that ar...