CVE-2018-8811

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

CVE-2018-8811

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

CVE-2018-8811

Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only registered users...

Cross site request forgery (csrf)

DISPUTED Cross-site request forgery CSRF vulnerability in system/workplace/admin/accounts/userrole.jsp in OpenCMS 10.5.3 allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. Note: It is argued that OpenCMS allows only...

PT-2018-18636 · Opencms · Opencms

Name of the Vulnerable Software and Affected Versions: OpenCMS version 10.5.3 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrative users for requests that perform privilege escalation. The system stores uploaded content, such ...

CVE-2018-5216

Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...

Sony Interactive Entertainment Content Manager Assistant for PlayStation untrustworthy search path vulnerability

Sony Interactive Entertainment Content Manager Assistant for PlayStation is a content management program for PlayStation by Sony Interactive Entertainment Japan. The program is used to transfer data between PlayStation Vita and PlayStation TV systems. An untrustworthy search path vulnerability...

CVE-2017-17010

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-17010

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-17010

CVE-2017-17010 affects Sony Interactive Entertainment Content Manager Assistant for PlayStation (version 3.55.7671.0901 and earlier). The issue is an untrusted search path vulnerability (CWE-427) in the installer/DLL loading process, allowing an attacker to gain privileges via a Trojan horse DLL ...

CVE-2017-17010

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries

Overview Content Manager Assistant for PlayStation provided by Sony Interactive Entertainment Inc. is a data transfer tool. The installer of Content Manager Assistant for PlayStation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427...

JVN#95423049: The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries

Content Manager Assistant for PlayStation provided by Sony Interactive Entertainment Inc. is a data transfer tool. The installer of Content Manager Assistant for PlayStation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact...

IBM Support Tools for Lotus WCM Cross-Site Scripting Vulnerability

IBM WebSphere Portal is a suite of enterprise portal software from IBM Corporation. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers, suppliers, etc. to access internal data through the platform.IBM Support Tools for...

HP Content Manager Workgroup Service Denial of Service Vulnerability

HP Content Manager is a governance-based enterprise content management system for helping government agencies, regulated industries, and global organizations manage their business content from creation to disposal. A remote denial of service vulnerability exists in HPE Content Manager Workgroup...

CVE-2017-14360

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

Design/Logic Flaw

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360

CVE-2017-14360 affects HPE Content Manager Workgroup Service v9.00. The vulnerability is described as a remote denial-of-service (DoS) condition in the Workgroup Service, with exploitation able to cause service disruption. The available connected documents identify the affected product and the Do...