EUVD-2019-13867

Malware in sbrugna...

EUVD-2017-10227

Malware in sbrugna...

EUVD-2017-10226

Malware in sbrugna...

EUVD-2019-13853

Malware in sbrugna...

EUVD-2017-10225

Malware in sbrugna...

EUVD-2019-14063

Malware in sbrugna...

EUVD-2017-10228

Malware in sbrugna...

EUVD-2018-11978

Malware in sbrugna...

Cross site scripting

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2023-40684: Improper Neutralization of Input During Web Page Generation

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability

Summary Daeja ViewONE Professional, Standard & Virtual has addressed the following vulnerability. When logging is enabled in Daeja ViewONE, the user's current session ID can be written to log files or standard output. Vulnerability Details CVEID: CVE-2017-1211 DESCRIPTION: IBM Daeja ViewONE...

Security Bulletin: Daeja ViewONE Virtual may expose internal IP addresses (CVE-2019-4246)

Summary During certain operation Daeja ViewONE transmits the internal IP address to the client. Vulnerability Details CVEID: CVE-2019-4246 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual could expose internal parameters to ViewONE clients that could be used in further attacks...

Security Bulletin: It is possible to download arbitrary server files via ViewONE server (CVE-2019-4260)

Summary A logged in user may be able to download arbitrary files from the server using the ViewONE Virtual platform. Vulnerability Details CVEID: CVE-2019-4260 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual could allow an unauthorized user to download server files resulting in...

CVE-2019-4246

IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521...

CVE-2019-4246: Undefined Security Weakness

IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521...

CVE-2019-4456: Improper Restriction of XML External Entity Reference

IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and 5.0.6 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 163620...

CVE-2019-4260

IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012...

CVE-2019-4260: Undefined Security Weakness

IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012...

CVE-2018-1835: Improper Restriction of XML External Entity Reference

IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514...

CVE-2018-1399: Improper Neutralization of Input During Web Page Generation

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...