EUVD-2019-5509

Malware in sbrugna...

EUVD-2019-4710

Malware in sbrugna...

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

CVE-2019-14278

In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...

CVE-2019-14278

In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...

Code injection

In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...

CVE-2019-14278

In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...

CVE-2019-14278

Technical details about CVE-2019-14278 are not publicly available in the provided connected documents; no additional specifics on affected components, exploit methods, or remediation are included here. Monitor for updates.

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

Code injection

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...

CVE-2019-13189

Knowage up to version 6.1.1 is vulnerable to a Cross-Site Scripting (XSS) flaw that can be triggered via the start_url or user_id parameter targeting the ChangePwdServlet. The issue stems from insufficient validation of client-side data, enabling an attacker to inject and execute script in the us...

CVE-2019-13189

In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...