10 matches found
CVE-2020-7131
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
CVE-2019-4409
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...
PT-2019-17067
Name of the Vulnerable Software and Affected Versions HCL Traveler versions 9.x and earlier Description The issue concerns a cross-site scripting XSS vulnerability. Specifically, on the Problem Report page of the Traveler servlet pages, there is a field for specifying a file attachment to provide...
CVE-2019-4409: Improper Neutralization of Input During Web Page Generation
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...
PT-2015-3440
Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.20 Description The issue is related to a cross-site scripting XSS vulnerability. It is associated with the debug mode devMode of the Apache Struts platform, where the structure of web pages is not properly...
PT-2015-3441
Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.20 Description The issue is related to a cross-site scripting XSS vulnerability in the implementation of the debug mode devMode in Apache Struts. This vulnerability can be exploited by a remote attacker to...
Ubuntu 8.04 LTS / 8.10 / 9.04 : Apport vulnerability (USN-768-1)
Stephane Chazelas discovered that Apport did not safely remove files from its crash report directory. If Apport had been enabled at some point, a local attacker could remove arbitrary files from the system. Note that Tenable Network Security has extracted the preceding description block directly...
Debian: Security Advisory (DSA-590-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNATS - gen-index
Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki [email protected] Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system...