282 matches found
CVE-2019-15313
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
CVE-2019-8947
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2019-15313
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
CVE-2019-8947
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
Cross site scripting
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
Cross site scripting
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
Design/Logic Flaw
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-8947
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2019-12427
CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-15313
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
CVE-2019-12427: Improper Neutralization of Input During Web Page Generation
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-8947: Improper Neutralization of Input During Web Page Generation
Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS...
CVE-2019-15313: Improper Neutralization of Input During Web Page Generation
In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability...
Default credentials
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0...
Mozilla Firefox Input Validation Error Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability exists in versions of Mozilla Firefox prior to 64, which arises from a network system or product that does not properly validate incoming data. An attacker could...
UBUNTU-CVE-2018-18510
The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service DOS attack by a malicious site which links to these pages. This vulnerabilit...
Design/Logic Flaw
The about:crashcontent and about:crashparent pages can be triggered by web content. These pages are used to crash the loaded page or the browser for test purposes. This issue allows for a non-persistent denial of service DOS attack by a malicious site which links to these pages. This vulnerabilit...
Microsoft’s Cyber Defense Operations Center shares best practices
Today, a single breach, physical or virtual, can cause millions of dollars of damage to an organization and potentially billions in financial losses to the global economy. Each week seems to bring a new disclosure of a cybersecurity breach somewhere in the world. As we look at the current state o...