1362 matches found
Security Bulletin: IBM Tealeaf Customer Experience is affected by a security vulnerability (CVE-2015-4989)
Summary The IBM Tealeaf Customer Experience portal is affected by a security vulnerability that might allow unauthorized access to images of charts generated by other users. Vulnerability Details CVEID: CVE-2015-4989 DESCRIPTION: The IBM Tealeaf Customer Experience portal allows an attacker with...
2345 Viewer Handles BMP Images with Denial of Service Vulnerability
2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A denial-of-service vulnerability exists in the handling of BMP images in 2345 Chart Viewer. An attacker who exploits this vulnerability to construct a malformed BMP image can cause the program to...
OMRON CX-Supervisor SCS Scatter Chart Object Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...
Stellar.org: It's possible to put SDX orderbook into invalid state and execute trades at arbitrary price
stellar-core improperly handles creation of a buy offer which crosses existing sell offers immediate execution but can only be filled partially due to a trustline limit on the source account. This makes it possible to create a valid offer to buy any custom asset at higher price than existing sell...
CVE-2018-2390
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...
CVE-2018-2390
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...
Cross site request forgery (csrf)
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...
CVE-2018-2390
CVE-2018-2390 affects SAP Internet Graphics Server (IGS) via the IGS Chart service, impacting IGS versions 7.20, 7.20EXT, 7.45, 7.49, and 7.53. The description indicates that under certain conditions a malicious user can prevent legitimate users from accessing IGS, implying a denial-of-service-li...
Cross-site Scripting (XSS)
superset is vulnerable to cross-site scripting XSS attacks. A malicious user is able to inject and execute arbitrary Javascript when generating links in markdown or in the chart description...
OpenEMR open-flash-chart.swf and _posteddata.php files cross-site scripting vulnerability
OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A cross-site scripting vulnerability exists in the open-flash-chart.swf a...
Oracle PeopleSoft Products PeopleSoft Enterprise HCM Human Resources Component Security Vulnerability
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM Human Resources is one of the human resource management components...
CVE-2018-2654
Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
rfes.utrgv.edu XSS vulnerability
Vulnerable URL: https://rfes.utrgv.edu/images/ofc/open-flash-chart.swf?get-data=functionalert/Openbugbounty/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...
nebraska.edu XSS vulnerability
Vulnerable URL: https://nebraska.edu/docs/budget/open-flash-chart.swf?get-data=functionalert/Openbugbounty/ Details: Description| Value ---|--- Patched:| Yes, at 04.12.2017 Latest check for patch:| 04.12.2017 16:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
anniesremedy.com XSS vulnerability
Vulnerable URL: https://www.anniesremedy.com/chartremedy.php?oilID=1"...
How to Combine D3 with AngularJS
The Benefits and Challenges of D3 Angular Combination Today we'll be focusing on how to combine D3 with the AngularJS framework. As we all know, Angular and D3 frameworks are very popular, and once they work together they can be very powerful and helpful when creating dashboards. But, they can al...
Analysis of the EQGRP leakage
As you know, yesterday TheShadowBrokers group released EQGRP archive with some interesting data inside. As they mentioned, it’s a NSA leakage with a lot of “cyberweapon”. I analysed this data yesterday to find the answers to following questions: 1. When did the leak occur? 2. Who were the targets...
Remote Code Execution (RCE)
airflow is vulnerable to remote code execution RCE attacks. The attacks are possible because it does not prevent the chartdata endpoints taking arbitrary strings and executing them...
keralawomen.gov.in XSS vulnerability
Vulnerable URL: http://keralawomen.gov.in/plugins/content/flashchart/open-flash-chart.swf?get-data=functionpromptOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 354050...
guriatedu.gov.sa XSS vulnerability
Open Bug Bounty ID: OBB-211035 Description| Value ---|--- Affected Website:| guriatedu.gov.sa Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...