Cross site scripting

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

CVE-2021-28047

CVE-2021-28047 affects Devolutions Remote Desktop Manager. The vulnerability is a Cross-Site Scripting (XSS) in Administration Reports present in versions prior to 2021.1, exploitable by a remote authenticated user who can inject arbitrary web script or HTML via multiple input fields. The connect...

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in the Administration Report in Devolutions Remote Desktop Manager...

Devolutions Remote Desktop Manager 跨站脚本漏洞

Devolutions Remote Desktop Manager is a remote desktop management tool that centralizes all remote connections on a platform that is securely shared between users and across teams. A cross-site scripting vulnerability exists in webviews in Devolutions Remote Desktop Manager versions prior to...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2021-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vdsm: privilege escalation to root via systemd_run

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemdrun function exposed to the vdsm system user could be abused to execute arbitrary commands as root...

Lotus Notes RIM connector for Blackberry Desktop Manager ActiveX Denial of Service - Ver2 (CVE-2009-3038)

A denial-of-service vulnerability has been reported in Ibm Lotus Notes Connector. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Debian Security Advisory DSA 2205-1 (gdm3)

The remote host is missing an update to gdm3 announced via advisory DSA 2205-1. OpenVAS Vulnerability Test $Id: deb22051.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2205-1 gdm3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

BlackBerry Enterprise Server Web Desktop Manager XSS (KB26296)

The version of BlackBerry Enterprise Server on the remote host reportedly contains a cross-site scripting vulnerability in its Web Desktop Manager component. An attacker may be able to leverage this issue to execute arbitrary script code in the browser of an authenticated user in the context of t...

CVE-2011-0286

CVE-2011-0286 is an XSS vulnerability in the BlackBerry Web Desktop Manager component of BlackBerry BES/BES Express (versions before 5.0.2 MR5, 5.0.3 before MR1, and 5.0.1–5.0.2 for BES Express). The issue arises from the displayErrorMessage parameter in the ManageDevices action, allowing remote ...

GNOME Desktop Manager privilege escalation

root privileges are not dropped on files access...

[SECURITY] [DSA 2205-1] gdm3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2205-1 [email protected] http://www.debian.org/security/ Florian Weimer March 28, 2011 http://www.debian.org/security/faq -...

vdsm: SSL accept() blocks on a non-blocking Connection

Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization RHEV 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service daemon outage via crafted SSL traffic...

CVE-2010-1143

CVE-2010-1143 describes a Cross-Site Scripting vulnerability in VMware View (Portal) 3.1.x prior to 3.1.3 build 252693, allowing injection of arbitrary HTML/script via unspecified vectors. Connected documents indicate affected product scope includes VMware View Portal (3.1), with the DSecRG advis...

BlackBerry桌面管理器ActiveX控件远程代码执行漏洞

Bugraq ID: 36903 CVE ID：CVE-2009-0306 BlackBerry Desktop Manager是一款用于管理黑莓智能手机的桌面管理器。 BlackBerry桌面管理器默认包含使用的Lotus Notes Intellisync DLL存在安全问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意指令。 攻击者可以诱使用户点击恶意WEB站点链接如嵌入在EMAIL消息，浏览器或即使消息中触发此漏洞。 Research In Motion Blackberry Desktop Manager 4.2.2 + Macrovision FLEXnet Connec...

CVE-2009-0306

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

CVE-2009-0306

CVE-2009-0306 describes a buffer overflow in the Lotus Notes Intellisync ActiveX control (lnresobject.dll) bundled with BlackBerry Desktop Manager/BlackBerry Desktop Software prior to 5.0.1, enabling remote code execution when a user visits a crafted web page. Affected product range includes Blac...