9363 matches found
NetData <= 1.13.0 HTML Injection Vulnerability
NetData is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:my-netdata:netdata";...
CVE-2019-4250
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4084
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384...
CVE-2019-4250
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4083
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4083
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4084
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384...
Code injection
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384...
Cross site scripting
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
Cross site scripting
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4083
CVE-2019-4083 affects IBM Jazz Foundation products (Rational CLM suite: CLM, RQM, RTC, DOORS, etc.) with cross-site scripting in the Web UI. Affected versions are 6.0–6.0.6.1. The root cause is an XSS vulnerability that could allow an attacker to inject arbitrary JavaScript, potentially leading t...
CVE-2019-4084
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384...
CVE-2019-4084
IBM Jazz Foundation (CLM) vulnerability CVE-2019-4084 affects Rational CLM products version 6.0 to 6.0.6.1. An authenticated user could obtain sensitive information from CLM Applications, as described in multiple sources (NVD/NVD-derived entries, CNVD, and IBM bulletin). The issue is categorized ...
CVE-2019-4250
CVE-2019-4250 is an XSS vulnerability in IBM Jazz Foundation products (IBM Rational CLM 6.0–6.0.6.1) affecting the Web UI and potentially enabling credentials disclosure within a trusted session. Root cause: cross-site scripting due to improper input handling in the Web UI. Affected products span...
CVE-2019-4083
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
CVE-2019-4250
IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...
PT-2019-16889 · Ibm · Ibm Jazz Foundation +1
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentiall...
PT-2019-16993 · Ibm · Ibm Jazz Foundation +1
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentiall...
PT-2019-16890 · Ibm · Ibm Jazz Foundation +1
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation products IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue allows an authenticated user to obtain sensitive information from CLM Applications, which could be used in furthe...
Mozilla -- multiple vulnerabilities
Mozilla Foundation reports: CVE-2019-11708: sandbox escape using Prompt:Open Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When...