Cross site scripting

IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999736...

CVE-2017-1146

IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999736...

CVE-2017-1146

CVE-2017-1146 affects IBM Content Navigator in versions 2.0.3 and 3.0.0. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause: insecure handling of user ...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2017-02624)

IBM Content Navigator is a Web client from IBM USA that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator versions 2.0.3 and 3.0.0. An attacker can exploit the vulnerabili...

2GIS: directory & navigator - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application 2GIS: directory & navigator published at the 'play' market has multiple vulnerabilities...

Mozilla Firefox < 50.1 Multiple Vulnerabilities

Binary data 9851.prm...

CVE-2016-9896

Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox 50.1...

UBUNTU-CVE-2016-9896

Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox 50.1...

DB Navigator - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application DB Navigator published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Firefox ESR browser allows a malicious actor to forge cross-site requests.

The vulnerability of Firefox ESR’s navigator.sendBeacon function, related to the processing of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access controls and forge cross-site requests by using a specially crafted website...

The vulnerability of the Thunderbird email client, which allows a remote attacker to forge cross-site requests

A vulnerability exists in the Thunderbird email client’s navigator.sendBeacon function, related to the handling of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted we...

The vulnerability of the Firefox browser, which allows a remote attacker to forge cross-site requests

The vulnerability of the Firefox browser in the navigator.sendBeacon function, related to the processing of HTTP status codes 30x. Exploiting this vulnerability allows a malicious actor to bypass CORS access control mechanisms and forge cross-domain requests by using a specially crafted web page...

The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality of protected information.

The vulnerability exists in Web Navigator of Siemens WinCC due to the different behaviors of NetBIOS user names, depending on whether a user account exists or not. Exploiting this vulnerability allows remote users who have been authenticated to list user accounts using specially crafted URL...

The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The implementation of SQL code on the Web Navigator system’s input screen allows malicious actors operating remotely to execute arbitrary SQL commands...

The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability exists in the implementation of the Web Navigator interface in Siemens WinCC, due to the presence of a strictly encrypted user account. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to the system through a specially crafted request...

The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability exists in the implementation of the Web Navigator interface in Siemens WinCC, due to the presence of a strictly encrypted user account. Exploiting this vulnerability allows malicious individuals operating remotely to gain access to the system through a specially crafted request...

The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The implementation of SQL code on the Web Navigator system’s input screen allows malicious actors operating remotely to execute arbitrary SQL commands...

The vulnerability of the Simatic WinCC software allows a remote attacker to compromise the confidentiality of protected information.

The vulnerability exists in Web Navigator of Siemens WinCC due to the different behaviors of NetBIOS user names, depending on whether a user account exists or not. Exploiting this vulnerability allows remote users who have been authenticated to list user accounts using specially crafted URL...

VMSA-2016-0005:VMware product updates address CRITICAL and HIGH security issues

VMSA-2016-0005.5 VMware product updates address critical and important security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0005.5 VMware Security Advisory Synopsis: VMware product updates address critical and important security issues. VMware Security Advisory...

Navitel Navigator GPS & Maps - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Navitel Navigator GPS & Maps published at the 'play' market has multiple vulnerabilities...