29839 matches found
CVE-2020-15138: Improper Neutralization of Input During Web Page Generation
Prism is vulnerable to Cross-Site Scripting. The easing preview of the Previewers plugin has an XSS vulnerability that allows attackers to execute arbitrary code in Safari and Internet Explorer. This impacts all Safari and Internet Explorer users of Prism =v1.1.0 that use the Previewers plugin...
PT-2020-14218
Name of the Vulnerable Software and Affected Versions Prism versions 1.1.0 through 1.20.0 Prism Previewers plugin versions 1.10.0 through 1.20.0 Prism Previewer: Easing plugin versions 1.1.0 through 1.9.0 Description The easing preview of the Previewers plugin has a Cross-Site Scripting XSS...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2020-51786)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft IE 11. The vulnerability can be exploited by an attacker to obtain a user's personal information by making ...
Skype for Business IE Unauthorized Access
The vulnerability of the Skype for Business app in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by clicking on a specially created link within the app...
VBScript Script Handler Code Execution
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Nagios XI Cross-Site Scripting Vulnerability (CNVD-2020-41877)
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A cross-site scripting vulnerability exists in Graph Explorer in Nagios XI versions prior to 5.7.2. An attacker can exploit this...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
Design/Logic Flaw
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
CVE-2020-15902
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer (CVE-2020-2781)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer. Watson Explorer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-2781 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE JSSE compone...
Security Bulletin: Vulnerability in IBM Java Runtime affects Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2020-2654)
Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-26...
Security Bulletin: Vulnerability exists in Watson Explorer (CVE-2020-4329)
Summary Security vulnerability affects IBM Watson Explorer. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by...
Security Bulletin: Vulnerability affects Watson Explorer Foundational Components (CVE-2020-1967)
Summary Security vulnerability affects IBM Watson Explorer Foundational Components. Vulnerability Details CVEID: CVE-2020-1967 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. By passing specially crafted data to the SSLcheckchain function during or...
CVE-2020-15902: Improper Neutralization of Input During Web Page Generation
Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option...
PT-2020-14700 · Nagios · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.7.2 Description: The issue allows for XSS via the link url option in the Graph Explorer component. This could potentially lead to malicious script execution. Recommendations: For versions prior to 5.7.2, update t...
F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K20346072)
A use-after-free memory vulnerability exists in the BIG-IP Edge Client Windows ActiveX component. CVE-2020-5897 Impact This vulnerability allows an attacker to trigger memory corruption to the browser or execute code from the browser when the attacker crafts a malicious webpage and loads it into...
Microsoft Internet Explorer Memory Corruption (MS11-003; CVE-2011-0035)
A memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker may create a...
CVE-2020-1432
An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Internet Explorer Information Disclosure Vulnerability'...