Improper Domain Name Validation

com.liferay.portal, com.liferay.portal.impl is vulnerable to an improper domain name validation. The vulnerability is due to incorrect identification of the subdomain in domain names, which can lead to the creation of a supercookie, allowing an attacker controlling a website with the same top-lev...

EUVD-2018-18281

Malware in sbrugna...

Viki Solutions Viki Vera Cross-Site Scripting Vulnerability

Viki Solutions Viki Vera is a suite of workflow customization platforms from Canadian company Viki Solutions. The platform supports file uploading, job management, and other features. A security vulnerability exists in Viki Vera 4.9.1.26180, which can be exploited by an attacker to set a user's...

CVE-2018-6528

XSS vulnerability in htdocs/webinc/body/bscsmssend.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver...

Code injection

The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...

PT-2015-5497

Name of the Vulnerable Software and Affected Versions IBM Rational License Key Server RLKS versions 8.1.4 through 8.1.4.6 Description The issue in the Administration and Reporting Tool of IBM Rational License Key Server allows remote authenticated users to read cookies. Recommendations For versio...

PT-2011-4758

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.102 Description The issue allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors due to improper handling of javascript: URLs. Recommendations For versio...

PT-2010-5566

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.1.x through 7.1.1.3 IBM Rational ClearQuest versions 7.1.2.x through 7.1.2.0 Description The issue allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue...