17 matches found
EUVD-2019-5509
Malware in sbrugna...
EUVD-2019-4710
Malware in sbrugna...
CVE-2019-13189
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...
CVE-2019-14278
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-14278
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
Code injection
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-14278
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-14278
Technical details about CVE-2019-14278 are not publicly available in the provided connected documents; no additional specifics on affected components, exploit methods, or remediation are included here. Monitor for updates.
PT-2019-13580
Name of the Vulnerable Software and Affected Versions Knowage versions prior to 6.1.2 Description The issue allows an unauthenticated user to enumerate valid usernames via the ChangePwdServlet page. Recommendations For versions prior to 6.1.2, update to version 6.1.2 or later to resolve the issue...
CVE-2019-14278: Undefined Security Weakness
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-13189
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...
CVE-2019-13189
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...
Code injection
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...
CVE-2019-13189
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...
CVE-2019-13189
Knowage up to version 6.1.1 is vulnerable to a Cross-Site Scripting (XSS) flaw that can be triggered via the start_url or user_id parameter targeting the ChangePwdServlet. The issue stems from insufficient validation of client-side data, enabling an attacker to inject and execute script in the us...
PT-2019-13178
Name of the Vulnerable Software and Affected Versions Knowage versions prior to 6.1.2 Description The issue allows for XSS via the start url or user id field to the "ChangePwdServlet" page. Recommendations For versions prior to 6.1.2, update to version 6.1.2 or later to resolve the issue...
CVE-2019-13189: Improper Neutralization of Input During Web Page Generation
In Knowage through 6.1.1, there is XSS via the starturl or userid field to the ChangePwdServlet page...