9723 matches found
PHP-Fusion < 9.03.30 Multiple XSS Vulnerabilities
PHP-Fusion is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
The vulnerability of the Mobile Service component of the BI Publisher software platform from Oracle Fusion Middleware relates to insufficient validation of input data. This allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Mobile Service component in the BI Publisher reporting tool, a software platform developed by Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Security Bulletin: Publicly disclosed vulnerability in Oracle Outside In Technology used by IBM FileNet Content Manager
Summary Multiple vulnerabilities may affect Oracle Outside In Technology OIT Version 8.5.3 used by IBM FileNet Content Manager. Oracle OIT issues disclosed in the Oracle October 2018 Critical Patch Update. Vulnerability Details CVEID: CVE-2018-18224 DESCRIPTION: An unspecified vulnerability in...
CVE-2020-17450
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17450
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
Design/Logic Flaw
PHP-Fusion 9.03 allows XSS via the errorlog file...
Design/Logic Flaw
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17450
PHP-Fusion 9.03 allows XSS on the preview page...
CVE-2020-17450
PHP-Fusion 9.03 is affected by cross-site scripting on the preview page (CVE-2020-17450). The OpenVAS entry flags multiple XSS vulnerabilities in PHP-Fusion, specifically noting a version line that includes
CVE-2020-17449
PHP-Fusion 9.03 is affected by CVE-2020-17449, a cross-site scripting (XSS) vulnerability that can be triggered via the error_log file. The NVD lists CVSS v3.1 base score 5.4 (MEDIUM) with network vector, low privileges, user interaction required, and changed scope; CVSS v2 is 3.5 (LOW). No concr...
CVE-2020-17449
PHP-Fusion 9.03 allows XSS via the errorlog file...
corel PDF Fusion suffers from dll hijacking vulnerability
Founded in 1985 and headquartered in Ottawa, Canada, Corel is a leading manufacturer specializing in digital multimedia applications with subsidiaries in the United States, United Kingdom, Germany, Japan, China and Taiwan. There is a dll hijacking vulnerability in corel PDF Fusion, which can be...
demo.fusiondirectory.org Cross Site Scripting vulnerability OBB-1244104
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
VMware Fusion 11.x < 11.5.5 Privilege Escalation (VMSA-2020-0017)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x prior to 11.5.5. It is, therefore, affected by a privilege escalation vulnerability due to Improper XPC Client validation. An authenticated, local attacker can exploit this to escalate their normal user privileges...
Unauthorized Access Vulnerability in FX Devices of Shenzhen Xingfusion Technology Co.
Shenzhen Xing Fusion Technology Co. was founded in 07, 2018. The company's business scope includes: information technology, computer hardware and software and peripherals, network systems, communication engineering, automotive technology, bioengineering and biological products. An unauthorized...
Oracle WebCenter Sites (Jul 2020 CPU)
Oracle WebCenter Sites component of Oracle Fusion Middleware is affected by a vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability...
The vulnerability in the virtualization system of VMware Horizon Client, VMware Remote Console, and VMware Fusion allows a malicious individual to elevate their privileges to the root level.
The vulnerability of the virtualization system for VMware Horizon Client, VMware Remote Console, and VMware Fusion relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...
The vulnerability of VMware Fusion and VMware Workstation, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of VMware Fusion and VMware Workstation lies in their lack of access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...