dotDefender Firewall Cross-Site Request Forgery Vulnerability

dotDefender is a suite of real-time network monitoring tools that provide comprehensive monitoring of networks, protection against malicious attacks by hackers, and more. A cross-site request forgery vulnerability exists in dotDefender that allows remote attackers to construct malicious URIs, tri...

Yeager Cross-Site Request Forgery Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious operations...

Ipswitch MOVEit Mobile Cross-Site Request Forgery Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. Ipswitch MOVEit Mobile suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

Adobe Download Manager Suspicious Search Path Vulnerability

Adobe Download Manager works directly with Adobe servers to help control the download process of Adobe Reader, Adobe Acrobat and other Adobe files. A suspicious search path vulnerability exists in Adobe Download Manager, where malicious attackers can build malicious files and trick users into...

AlienVault OSSIM Cross-Site Request Forgery Vulnerability

AlienVault OSSIM is an open source security information management system. AlienVault OSSIM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the targ...

Adobe Flash Player Flash broker API has unspecified vulnerability

Adobe Flash Player is a Flash file handling program. An unspecified security vulnerability exists in the Adobe Flash Player Flash broker API. This allows remote attackers to construct malicious SWF content and trick users into parsing it...

Microsoft Edge Memory Object Handling Information Disclosure Vulnerability

Microsoft Edge is one of the latest WEB browsers. A security vulnerability exists in Microsoft Edge's handling of object memory. The vulnerability allows remote attackers to construct a special WEB page to trick users into loading it, which can obtain partial memory information about the target...

Kaspersky Internet Security File Deshelling Buffer Overflow Vulnerability

Kaspersky Internet Security is an Internet security suite. Kaspersky Internet Security handles file stripping with a security vulnerability that allows an attacker to construct malicious files and trick users into parsing them, which can crash applications or execute arbitrary code...

Aruba Networks Mobility Controller Cross-Site Request Forgery Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site request forgery vulnerability exists in Aruba Networks Mobility Controller, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2015-04903)

Google Chrome is an open source WEB browser. Google Chrome's automatic open list handling suffers from a security vulnerability that allows attackers to build malicious WEB pages, trick users into parsing them, and allow executable files to be executed immediately after download...

EMC Documentum CenterStage Cross-Site Scripting Vulnerability

EMC Documentum CenterStage is a document management service. A cross-site scripting vulnerability in EMC Documentum CenterStage allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target user...

Cisco TelePresence MCU 4500 Device Cross-Site Request Forgery Vulnerability

The Cisco TelePresence MCU 4500 is a multimedia conferencing bridge product. A cross-site request forgery vulnerability exists in the Cisco TelePresence MCU 4500 device, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in...

Ektron Cross-Site Request Forgery Vulnerability

Ektron is an enterprise-level Web content management system. A cross-site request forgery vulnerability exists in Ektron that allows remote attackers to construct malicious URIs and trick users into parsing them, which can perform malicious actions in the context of the target user...

Drupal Decisions Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Decisions, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Drupal Invoice Module Cross-Site Request Forgery Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site request forgery vulnerability exists in Drupal Invoice, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Unspecified Buffer Overflow Arbitrary Code Execution Vulnerability in Adobe Reader/Acrobat

Adobe Reader/Acrobat are popular applications for processing PDF files. A buffer overflow vulnerability exists in Adobe Reader/Acrobat's handling of particular PDF files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, whi...

MikroTik RouterOS Cross-Site Request Forgery Vulnerability

MikroTik RouterOS is an operating system for routers. MikroTik RouterOS suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions, such as changing passwords, in the context of...

Fat Free CRM Cross-Site Request Forgery Vulnerability

Fat Free CRM is a customer application management. Fat Free CRM suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user contexts to perform malicious actions...

Unspecified Vulnerability in Adobe Flash Player and AIR

Adobe Flash Player is a Flash file handling program.Adobe Air is a cross-OS runtime library from Adobe. An unspecified vulnerability exists in Adobe Flash Player/AIR that allows attackers to construct malicious SWF files, trick users into parsing them, and execute arbitrary code in the context of...

Localize: ClickJacking

It allows remote attackers to do some clickjacking which can be used for adding arbitrary tasks . Why? Almost all of your page has missing X-FRAME-OPTIONS header. Websites are at risk of a clickjacking attack when they allow content to be embedded within a frame. An attacker may use this risk to...