1284 matches found
Novell ZENworks Mobile Management Cross-Site Scripting Vulnerability
Novell ZENworks Mobile Management is a mobile device management solution. A cross-site scripting vulnerability in the Novell ZENworks Mobile Management login form allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data,...
ZENWorks Mobile Management 3.1.0 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-020 Products: ZENWorks Mobile Management Vendor: Novell Affected Versions: 3.1.0 Tested Versions: 3.1.0 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Open Vendor Notification: 2015-04-21...
Projectsend r572 Cross Site Scripting
Title: Projectsend r572 - Cross Site Scripting Reflected Disclosed: 5/28/15 Vendor Patched: 6/6/15 Published: 6/10/15 Credit: Matt Landers - [email protected] Original Advisory: www.mjltech.net/adv/MJLTECH%20-%20Projectsend%20R572%20XSS.txt...
Netsparker 4 - Easier to Use, More Automation and Much More Web Security Checks
Netsparker Web Application Security Scanner version 4. The main highlight of this new version is the new fully automated Form Authentication mechanism; it does not require you to record anything, supports 2 factor authentication and other authentication mechanisms that require a one time code to...
adminer -- XSS vulnerability
Jakub Vrana reports: Fix XSS in login form...
CVE-2014-6255
Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the camefrom parameter, aka ZEN-11998...
Open redirect
Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the camefrom parameter, aka ZEN-11998...
CVE-2014-6255: Undefined Security Weakness
Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the camefrom parameter, aka ZEN-11998...
PT-2014-7121
Name of the Vulnerable Software and Affected Versions Zenoss Core versions prior to 4.2.5 SP161 Description The issue concerns an open redirect vulnerability in the login form. This allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the came from...
CVE-2014-9364: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Unified Login form in the LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-8963
Name of the Vulnerable Software and Affected Versions Drupal LoginToboggan module versions 7.x-1.x before 7.x-1.4 Description A cross-site scripting XSS issue exists in the Unified Login form of the LoginToboggan module, allowing remote attackers to inject arbitrary web script or HTML...
Code injection
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field...
CVE-2014-8534
Technical details such as affected products/versions, root cause, exploitability, or fixes are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain concrete information.
PT-2014-8597
Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue is related to an unspecified vulnerability in the login form. It allows local users to cause a denial of service by providing a crafted value in the domain...
CVE-2014-8534: Undefined Security Weakness
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field...
CVE-2014-3101
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2014-3101
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2014-3101
The CVE-2014-3101 issue affects IBM Rational ClearQuest Web login: the login form fails to insert a delay after failed attempts in affected releases (7.1.x prior to 7.1.2.15, 8.0.0.x prior to 8.0.0.12, and 8.0.1.x prior to 8.0.1.5). This omission enables brute-force attempts to gain access. The I...
PT-2014-5090
Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.15 IBM Rational ClearQuest versions 8.0.0 through 8.0.0.12 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.5 Description The issue concerns the login form in the Web component, which does...
