CVE-2018-6960: Improper Authentication

VMware Horizon DaaS 7.x before 8.0.0 contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS...

CVE-2017-7257: Improper Neutralization of Input During Web Page Generation

XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1content parameter. Someone must login to conduct the attack...

CVE-2017-7256: Improper Neutralization of Input During Web Page Generation

XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1summary parameter. Someone must login to conduct the attack...

CVE-2017-7255: Improper Neutralization of Input During Web Page Generation

XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1title parameter. Someone must login to conduct the attack...

CVE-2016-1597: Undefined Security Weakness

A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator...