CVE-2026-111793

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...

EUVD-2026-103135

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...

CVE-2026-111793

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...

CVE-2026-111793

The Openwave Webtop Media Transcoder fails to enforce administrator-defined file type restrictions during the conversion process. This security weakness, categorized under CWE-669 , may allow an authenticated user to process and convert unintended document types by bypassing the Webmail experienc...

PT-2026-116133

Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...

CVE-2025-3271

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2025-3271

CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...

CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

EUVD-2025-210878

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

CVE-2025-3271: Improper Neutralization of Input During Web Page Generation

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...

NethServer WebTop 1.5.6 Cross Site Scripting

NethServer WebTop module versions 1.5.6 and below suffer from two persistent cross site scripting vulnerabilities...

CVE-2024-34058

The WebTop package for NethServer 7 and 8 allows stored XSS for example, via the Subject field if an e-mail message...

EUVD-2018-7212

Malware in sbrugna...

EUVD-2000-0050

Malware in sbrugna...

EUVD-2018-19376

Malware in sbrugna...

EUVD-2019-16958

Malware in sbrugna...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2013-0939

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting"...

Nethserver 7 / 8 Cross Site Scripting

CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting XSS in WebTop package Suggested description The WebTop package for NethServer 7 and 8 allows stored XSS for example, via the Subject field if an e-mail message. ------------------------------------------ Additional Information NethServe...