2101 matches found
CVE-2017-8993
CVE-2017-8993 is a remote Cross-Site Scripting vulnerability in Hewlett Packard Enterprise (HPE) Project and Portfolio Management Center (PPM). Affected are HPE PPM versions v9.30, v9.31, v9.32 and v9.40. The root cause reported across sources is inadequate input filtering of user-supplied data, ...
CVE-2017-8993: Improper Neutralization of Input During Web Page Generation
A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management PPM version v9.30, v9.31, v9.32, v9.40 was found...
PT-2018-8487
Name of the Vulnerable Software and Affected Versions HPE Project and Portfolio Management PPM versions v9.30 through v9.32, v9.40 Description A Remote Cross-Site Scripting issue was discovered in HPE Project and Portfolio Management PPM. Recommendations For versions v9.30 through v9.32, and v9.4...
WordPress Enfold theme <=4.2 - Rewrite Portfolio Permalink Structure & Information Disclosure
Rewrite Portfolio Permalink Structure & Information Disclosure in WordPress Enfold theme versions =4.2. Solution Update the WordPress Enfold theme to the latest available version at least 4.2.1...
Enfold Theme < 4.2.1 - Rewrite Portfolio Permalink Structure & Information Disclosure
The changelog describes two security fixes: - fixed: security issue that would allow an attacker to export your enfold theme settings - fixed: security issue that allowed an attacker to rewrite the portfolio permalink structure...
portfolio-gallery.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-506619 Description| Value ---|--- Affected Website:| portfolio-gallery.co.uk Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...
Cloud Migration Fundamentals
The advantages offered by a cloud-based environment make it an easy decision for most companies to make. Still, there are numerous critical choices to be made that can transform the complexities of the migration process into a relatively smooth transition—especially regarding application and data...
Celartem Extensis Portfolio NetPublish Cross-Site Scripting Vulnerability
Celartem Extensis Portfolio NetPublish is a digital asset management software from Celartem Japan. A cross-site scripting vulnerability exists in Celartem Extensis Portfolio NetPublish. A remote attacker can inject arbitrary web script or HTML by sending the 'quickfind' parameter to the...
Design/Logic Flaw
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...
CVE-2017-18006
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...
CVE-2017-18006
Extensis Portfolio NetPublish e netpub/server.np is affected by an XSS vulnerability in the quickfind parameter (CVE-2017-18006). The issue is consistently described across multiple sources (NVD, Red Hat, CNVD, CVE List) as a cross-site scripting flaw in the quickfind parameter. The connected doc...
PT-2018-6604
Name of the Vulnerable Software and Affected Versions: Extensis Portfolio NetPublish affected versions not specified Description: The issue concerns an XSS vulnerability in the quickfind parameter of the netpub/server.np component. Recommendations: At the moment, there is no information about a...
CVE-2017-18006: Improper Neutralization of Input During Web Page Generation
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...
CVE-2017-18006
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...
RHEL 6 : MRG (RHSA-2017:3493)
This is the 6-month notification for the retirement of Red Hat Enterprise MRG Version 2 for Red Hat Enterprise Linux 6. This notification applies only to those customers subscribed to Red Hat Enterprise MRG Version 2 for Red Hat Enterprise Linux 6. In accordance with the Red Hat Enterprise MRG Li...
Techno - Portfolio Management Panel Access Control Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An access control vulnerability exists in Techno - Portfolio Management Panel on 2017-11-16 and prior versions, which stems from the program failing to detect if a panel/portfolio.php?action=delete request is...
Techno - Portfolio Management Panel SQL Injection Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...
Techno - Portfolio Management Panel Information Disclosure Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An information disclosure vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. An attacker can exploit the vulnerability by sending an invalid 's' parameter to the...
Techno - Portfolio Management Panel Cross-Site Scripting Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A cross-site scripting vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the...
