983 matches found
CVE-2018-1999016
CVE-2018-1999016 affects Pydio 8.2.0 and earlier, with a Cross Site Scripting vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php (line 48) and ./core/vendor/dapphp/securimage/examples/test.mysql.static.php (lines 114, 118). An unauthenticated remote attacker could manipula...
CVE-2018-1999016
Pydio version 8.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in ./core/vendor/meenie/javascript-packer/example-inline.php line 48; ./core/vendor/dapphp/securimage/examples/test.mysql.static.php lines: 114,118 that can result in an unauthenticated remote attacker manipulating...
CVE-2018-2936
Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Unspecified Vulnerability in Oracle Communications Messaging Server
Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...
Veeam Backup & Replication plug-in missing in vSphere HTML5 Web Client after upgrade to VMware vSphere 6.7
Challenge After installing Veeam 9.5 Update 3a and simultaneous upgrade of vSphere from 6.5 to 6.7 Veeam vSphere Web Client Plugin might stop working for vSphere HTML5 Web Client. However it is still operational in vSphere Flash/Flex Web Client. The issue is only reproducible in case the plugin w...
Mirasys DVMS Workstation Gateway Path Traversal Vulnerability
Mirasys DVMS Worlstation is a surveillance video management system from the Finnish company Mirasys, of which Gateway is a gateway. A path traversal vulnerability exists in Mirasys DVMS Workstation 5.12.6 and earlier versions of Gateway. A remote attacker can use the Web Client webserver to...
Mirasys DVMS Workstation 5.12.6 Path Traversal
Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
Mirasys DVMS Workstation 5.12.6 - Path Traversal
Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
Mirasys DVMS Workstation 5.12.6 - Path Traversal
Mirasys DVMS Workstation 5.12.6 - Path Traversal Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...
Mirasys DVMS Workstation 5.12.6 - Path Traversal Vulnerability
Exploit for windows platform in category web applications Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 0day.today 2018-06-20...
CVE-2018-8727
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver...
CVE-2018-8727
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver...
CVE-2018-8727
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver...
CVE-2018-8727
CVE-2018-8727 affects Mirasys DVMS Workstation ≤ 5.12.6. The vulnerability is a path traversal/local file inclusion in the Gateway’s Web Client webserver, allowing an attacker to traverse the file system and access sensitive files. Impact and details are confirmed by multiple connected sources (L...
CVE-2018-8727
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver...
Security Bulletin: IBM Tivoli Storage Manager Client vulnerable to Client Acceptor Daemon (CAD) crash (CVE-2015-4951)
Summary The IBM Tivoli Storage Manger IBM Spectrum Protect client is vulnerable to a remote attacker crashing the Client Acceptor Daemon CAD by sending a specially crafted URL to access the Tivoli Storage Manager Web client. Vulnerability Details CVEID: CVE-2015-4951 DESCRIPTION: IBM Tivoli Stora...
Security Bulletin: Vulnerability in IBM Rational ClearQuest Web Client with potential for Information Disclosure (CVE-2013-5422)
Summary An Information Disclosure Attack vulnerability exists in IBM Rational ClearQuest Web Client. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CV...
Security Bulletin: Vulnerability in IBM Rational ClearQuest Web Client with potential for Cross-Site Request Forgery (CVE-2013-0598)
Summary A Cross-Site Request Forgery CSRF Attack vulnerability exists in IBM Rational ClearQuest Web Client. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID...
Security Bulletin: Vulnerability in IBM Rational ClearQuest Web Client with potential for JSON Hijacking Attack (CVE-2013-3041)
Summary A JSON Hijacking Attack vulnerability exists in IBM Rational ClearQuest Web Client. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...
Security Bulletin: ClearQuest SQL Error Message Attack Vulnerability (CVE-2012-5765)
Summary IBM Rational ClearQuest Web client contains SQL Error Message Attack vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...