CVE-2015-0787

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI...

CVE-2015-0787

NetIQ Designer for Identity Manager is affected by an XSS vulnerability in the forgotUser.do CGI, exploitable via the accessMgrDN parameter. Versions prior to 4.5.3 are impacted; remote attackers could inject arbitrary HTML/Script in a user’s context. Remediation: upgrade to version 4.5.3 or late...

CVE-2016-1592

NetIQ Designer for Identity Manager is affected by CVE-2016-1592: an XSS vulnerability in the nrfEntitlementReport.do CGI allows remote attackers to inject arbitrary HTML code in pages rendered for Identity Manager, and affects versions prior to 4.5.3. The connected documents confirm the vulnerab...

PT-2016-3563

Name of the Vulnerable Software and Affected Versions NetIQ Designer for Identity Manager versions prior to 4.5.3 Description The issue allows remote attackers to inject arbitrary HTML code, potentially leading to security breaches. This is achieved by manipulating the accessMgrDN value of the...

PT-2016-4876

Name of the Vulnerable Software and Affected Versions NetIQ Designer for Identity Manager versions prior to 4.5.3 Description The issue allows remote attackers to inject arbitrary HTML code, potentially leading to security breaches. This is achieved via the nrfEntitlementReport.do CGI...

CVE-2015-0787: Improper Neutralization of Input During Web Page Generation

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI...

CVE-2016-1592: Improper Neutralization of Input During Web Page Generation

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI...

Fatek Automation PM Designer Remote Command Execution Vulnerability

Fatek Automation PM Designer is a programmable logic controller from Fatek Automation. A remote code execution vulnerability exists in Fatek Automation PM Designer. An attacker could use this vulnerability to execute arbitrary code in the context of an affected application, which could also resul...

Fatek Automation PM Designer Remote Code Execution Vulnerability

Fatek Automation PM Designer is a programmable logic controller from Fatek Automation. A remote code execution vulnerability exists in Fatek Automation PM Designer, which could be exploited by an attacker to execute arbitrary code in an affected application, possibly also resulting in a denial of...

Yokogawa STARDOM Certification Bypass Vulnerability

The Yokogawa STARDOM FCN/FCJ controller is a controller for use in network-based control systems. The Yokogawa STARDOM FCN/FCJ controller fails to require authentication for Logic Designer connections, which could be used by a remote attacker to submit a special request to control the device...

Vulnerabilities include Microsoft Excel spreadsheet editor, Microsoft SharePoint Designer HTML editor, the Microsoft Office Compatibility Pack compatibility suite, Microsoft Excel Viewer for spreadsheet viewing, and Office Online Server. These components allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Excel spreadsheet editors, Microsoft SharePoint Designer HTML editors, the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Office Online Server are caused by an out-of-buffer operation in memory. Exploitation of these vulnerabilities could...

(0Day) Fatek Automation PM Designer Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation PM Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Yokogawa STARDOM Authentication Bypass Vulnerability

Yokogawa STARDOM is prone to an authenticatio bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

CVE-2016-4860

CVE-2016-4860 affects Yokogawa STARDOM FCN/FCJ controllers (R1.01–R4.01). The root cause is an authentication bypass in Logic Designer connections, allowing remote attackers to reconfigure the device or trigger a denial of service (stop application program, change value, modify application comman...

PT-2016-6181

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM FCN/FCJ controller versions R1.01 through R4.01 Description The issue allows remote attackers to reconfigure the device or cause a denial of service. This can be achieved via a stop application program, change value, or modify...

PT-2016-6992

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.6.x prior to 4.6.4 phpMyAdmin versions 4.4.x prior to 4.4.15.8 Description An issue was discovered in the "User group" and "Designer" features of phpMyAdmin, allowing a user to execute an SQL injection attack against the...

[SECURITY] Fedora 23 Update: kf5-kdesignerplugin-5.24.0-1.fc23

This framework provides plugins for Qt Designer that allow it to display the widgets provided by various KDE frameworks, as well as a utility kgendesignerplugin that can be used to generate other such plugins from ini-style description files...

[SECURITY] Fedora 24 Update: kf5-kdesignerplugin-5.24.0-1.fc24

This framework provides plugins for Qt Designer that allow it to display the widgets provided by various KDE frameworks, as well as a utility kgendesignerplugin that can be used to generate other such plugins from ini-style description files...