165 matches found
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
VulnCheck KEV: CVE-2026-111793
Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
CVE-2026-111793
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
CVE-2026-111793
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
EUVD-2026-103135
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
CVE-2026-111793
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
CVE-2026-111793
Openwave Webtop Media Transcoder versions prior to 1.1.22.0 are vulnerable to an improper authorization issue (CWE-669 ) where the software fails to enforce administrator-defined file type restrictions. This flaw allows an authenticated user to bypass the Webmail experience to process and convert...
PT-2026-116133
Name of the Vulnerable Software and Affected Versions Openwave Webtop Media Transcoder affected versions not specified Description An improper authorization issue exists where the software fails to enforce administrator-defined file type restrictions for file conversion. This allows an...
CVE-2026-111793: Incorrect Resource Transfer Between Spheres
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience...
Openwave Webtop Media Transcoder: Permissions, licensing, and access control issues
Openwave Webtop Media Transcoder versions prior to 1.1.22.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the lack of enforcement of file type restrictions defined by administrators, which may allow authenticated users to bypass the...
CVE-2025-3271
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2025-3271
CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...
EUVD-2025-210878
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2025-3271: Improper Neutralization of Input During Web Page Generation
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
NethServer WebTop 1.5.6 Cross Site Scripting
NethServer WebTop module versions 1.5.6 and below suffer from two persistent cross site scripting vulnerabilities...
CVE-2024-34058
The WebTop package for NethServer 7 and 8 allows stored XSS for example, via the Subject field if an e-mail message...