Security Bulletin: ClearQuest Web parameter tampering to elevated privileges (CVE-2012-2164)

Summary The IBM Rational ClearQuest Web client is subject to an elevated privileges attack. This allows an attacker to access the Site Administration menu. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Security Bulletin: ClearQuest Cross-Site Scripting (XSS) Vulnerability (CVE-2012-2205)

Summary IBM Rational ClearQuest Web client contains a Cross-Site Scripting vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...

Hyland Saperion Web Client Information Disclosure Vulnerability

Hyland Saperion Web Client is a client software for accessing the Saperion Enterprise Content Management System from Hyland, Inc. An information disclosure vulnerability exists in Hyland Saperion Web Client version 7.5.2 83166. A remote attacker can exploit this vulnerability to read arbitrary...

DEBIAN-CVE-2017-16026

Request is an http client. If a request is made using multipart, and the body type is a number, then the specified number of non-zero memory is passed in the body. This affects Request =2.2.6 2.51.0 =2.67.0...

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability (CNVD-2018-10867)

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Zimbra, Inc. that includes WebMail, Calendar, Address Book, etc. Zimbra Web Client ZWC is one of the Web-based client applications. A cross-site scripting vulnerability exists in ZWC in versions 8.8 prior to Zimbra ZCS...

CVE-2018-10939

Zimbra Web Client ZWC in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group...

CVE-2018-10939

Zimbra Collaboration Suite (ZCS) Web Client (ZWC) is affected by a persistent XSS issue in the ZWC component when used with ZCS versions 8.8.x before 8.8.8.Patch4 and 8.7.x before 8.7.11.Patch4. The vulnerability arises via a crafted contact group, enabling an attacker to inject arbitrary web scr...

CVE-2018-10241

A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application with a NULL pointer dereference via a specially crafted URL beginning with the /Web%20Client/ substring...

See how I found to Have a cloud storage platform session mechanisms of vulnerability-vulnerability warning-the black bar safety net

! Recently in contrast to cloud storage solutions, I was surprised to find that many companies are still offering unlimited cloud data storage service solution, like Have the company that such note and don't Have a format specification confusion, and Have the company designed for individuals,...

The vulnerability of the Saperion Web Client web application lies in its lack of access control mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Saperion Web Client web application is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges remotely...

How to Change Veeam ONE Web Client Port

Purpose This article documents the procedure for changing the port used by the Veeam ONE Web Client, which by default is 1239. Solution Desktop Shortcut Not Automatically Updated This procedure does not update the Veeam ONE Web Client shortcut on the desktop C:\Users\Public\Desktop. Part 1: Updat...

uTorrent Users Warned of Remote Code Execution Vulnerability

Google Project Zero researchers are warning of two critical remote code execution vulnerabilities in popular versions of BitTorrent’s web-based uTorrent Web client and its uTorrent Classic desktop client. According to researchers, the flaws allow a hacker to either plant malware on a user’s...

CVE-2018-2364

SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting XSS vulnerability...

Design/Logic Flaw

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6293

Arbitrary File Read in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

Remote code execution

Remote Code Execution in Saperion Web Client version 7.5.2 83166...

CVE-2018-6292

Remote Code Execution in Saperion Web Client version 7.5.2 83166...