59 matches found
EUVD-2016-10663
Malware in sbrugna...
EUVD-2015-0562
Malware in sbrugna...
EUVD-2016-10664
Malware in sbrugna...
EUVD-2016-0899
Malware in sbrugna...
EUVD-2014-2551
Malware in sbrugna...
EUVD-2015-0530
Malware in sbrugna...
CVE-2017-5586
OpenText Documentum D2 formerly EMC Documentum D2 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell bsh and Apache Commons Collections ACC libraries...
CVE-2016-9872
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system...
CVE-2016-9873
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...
CVE-2016-9872
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system...
PT-2017-10372
Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.5 through 4.6 Description The issue allows an authenticated low-privileged attacker to potentially exploit it and access information, modify data, or disrupt services by causing execution of arbitrary DQL commands ...
PT-2017-10371
Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.5 through 4.6 Description The issue is related to Reflected Cross-Site Scripting, which could potentially be exploited by malicious users to compromise the affected system. Recommendations For EMC Documentum D2...
CVE-2016-9873: Improper Neutralization of Special Elements used in a Command
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...
CVE-2016-9872: Improper Neutralization of Input During Web Page Generation
EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be exploited by malicious users to compromise the affected system...
EMC Documentum D2 4.5.x < 4.5 P15 / 4.6.x < 4.6 P03 r_object_id Handling Unauthenticated Document Disclosure (ESA-2016-108)
The remote host is running a version of EMC Documentum D2 that is 4.5.x prior to 4.5.0150 4.5 patch 15 or 4.6.x prior to 4.6.0030 4.6 patch 03. It is, therefore, affected by an information disclosure vulnerability due to improper validation of the 'robjectid' identifier. An unauthenticated, remot...
Code injection
EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...
PT-2016-7017
Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.5 before patch 15 EMC Documentum D2 versions 4.6 before patch 03 Description The issue allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an r object id value. Recommendations Fo...
CVE-2016-6644: Exposure of Sensitive Information to an Unauthorized Actor
EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...
EMC Documentum D2 < 4.6 Insufficient ACL Remote Object Manipulation (ESA-2016-034)
The remote host is running a version EMC Documentum D2 that is prior to 4.6. It is, therefore, affected by a security bypass vulnerability due to a failure to set secure access control lists ACLs for D2 configuration objects. An authenticated, remote attacker can exploit this to modify or delete ...