3028 matches found
ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS
The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...
Gryffin - Large Scale Web Security Scanning Platform
Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capability of scanning, and...
Tableau has multiple vulnerabilities
Tableau Server is enterprise intelligence software that provides browser-based analytics that anyone can learn and use. Tableau Server has a sensitive information disclosure and privilege bypass vulnerability that can be exploited by remote attackers to target administrative user actions, obtain...
ZOHO ManageEngine AssetExplorer Cross-Site Scripting Vulnerability
ZOHO ManageEngine AssetExplorer is a suite of asset management software. The software provides asset tracking, scanning of IT assets and tracking of asset ownership. ZOHO ManageEngine AssetExplorer handles a cross-site scripting vulnerability in Publisher registry entries, which allows remote...
ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting
Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...
ManageEngine Asset Explorer 6.1 Cross Site Scripting Vulnerability
ManageEngine Asset Explorer version 6.1 suffers from a persistent cross site scripting vulnerability. Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product &...
CVE-2015-2169
Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned...
CVE-2015-2169
Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned...
[SECURITY] Fedora 20 Update: apache-poi-3.10.1-2.fc20
The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...
Unspecified Vulnerability in Oracle BI Publisher BI Publisher Security Subware
OracleBIPublisher is a personalized report design solution. A security vulnerability in the Oracle BI Publisher BI Publisher Security child allows remote attackers to exploit the vulnerability to compromise system confidentiality...
CVE-2015-0362
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security...
Design/Logic Flaw
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security...
CVE-2015-0362
Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security...
CVE-2015-0362
Technical details about CVE-2015-0362 are not publicly available in the provided documents; no affected product/version specifics or root cause are disclosed. Monitor for updates from official advisories and trusted sources.
[SECURITY] Fedora 21 Update: apache-poi-3.10.1-1.fc21
The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...
ESA-2014-073: EMC Documentum Multiple Cross-Site Request Forgery Vulnerabilities
ESA-2014-073.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-073: EMC Documentum Multiple Cross-Site Request Forgery Vulnerabilities EMC Identifier: ESA-2014-073 CVE Identifier: CVE-2014-2518 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • EMC...
System vulnerability what is patched what is the meaning of-vulnerability warning-the black bar safety net
System vulnerabilities may often hear the word, but there are some novice friends do not know loopholes in the system? Simply put, the system vulnerability is theoperating systemsome of the possible security risks of the procedures and components, these vulnerabilities might allow your computer t...
Network Publisher <= 5.0.1 - Cross Site Scripting
The Network Publisher WordPress plugin was affected by a Cross Site Scripting security vulnerability...
WordPress Mainstream Theme - Remote Code Execution
There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...