1051 matches found
CVE-2019-5314
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
CVE-2019-5314: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting CRLF injection and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability...
PT-2019-17576
Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue concerns certain web components in the software that are susceptible to HTTP Response splitting CRLF injection and Reflected XSS. An attacker could exploit this by sending specific...
Cross site scripting
The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...
PT-2019-8468
Name of the Vulnerable Software and Affected Versions WordPress share-on-diaspora plugin versions prior to 0.7.2 Description The issue concerns reflected XSS in share URL parameters. Recommendations For versions prior to 0.7.2, update to version 0.7.2 or later to resolve the issue...
CVE-2017-18534: Improper Neutralization of Input During Web Page Generation
The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...
OPENSUSE-SU-2019:1849-1 Security update for chromium
This update for chromium to version 76.0.3809.87 fixes the following issues: - CVE-2019-5850: Use-after-free in offline page fetcher boo1143492 - CVE-2019-5860: Use-after-free in PDFium boo1143492 - CVE-2019-5853: Memory corruption in regexp length check boo1143492 - CVE-2019-5851: Use-after-pois...
CVE-2019-1954 Cisco Webex Meetings Server Open Redirection Vulnerability
A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to...
Cisco Webex Meetings Server Open Redirection Vulnerability
A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to...
CVE-2019-4193
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...
Information disclosure
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...
CVE-2019-4193
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...
CVE-2019-4193
IBM Jazz for Service Management versions 1.1.3–1.1.3.2 expose sensitive information via URL parameters, enabling potential disclosure if URLs are logged or exposed through referrers or browser history. The IBM advisory (and NVD entry) confirm the affected product and the risk vector, with CVSS de...
CVE-2019-4193: Exposure of Sensitive Information to an Unauthorized Actor
IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...
PT-2019-16958 · Ibm · Ibm Jazz For Service Management
Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management versions 1.1.3 through 1.1.3.2 Description: The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties gain access to the URLs...
Security Bulletin: IBM Jazz for Service Management stores sensitive information in URL parameters (CVE-2019-4193)
Summary IBM Jazz for Service Management stores sensitive information in URL parameters Vulnerability Details CVEID: CVE-2019-4193 DESCRIPTION: IBM Jazz for Service Management stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have acces...
CVE-2018-20807
An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)
Triggered via unescaped usage of URL parameters in multiple locations presented in the public view of a site. PoC http://www.domain.de/?rsd=%27%3E%3Csvg%2Fonload%3Dconfirm%2FOPENBUGBOUNTY%2F%3E...