VIVA Charts: Aktuelle Top Hits - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VIVA Charts: Aktuelle Top Hits published at the 'play' market has multiple vulnerabilities...

Bitcoin News, Ticker, & Charts - Customized SSL, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Bitcoin News, Ticker, & Charts published at the 'play' market has multiple vulnerabilities...

Stocks: Realtime Quotes Charts - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stocks: Realtime Quotes Charts published at the 'play' market has multiple vulnerabilities...

Prezi Cross Site Scripting

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1766 View Video: https://www.youtube.com/watch?v=QKSQvP5xGY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1725 Release Dat...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability

Document Title: =============== Prezi Bug Bounty 7 - Charts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1723 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ==================================== 1723...

Charts 4 PHP 1.2.3 Cross Site Scripting

Exploit Title: Charts 4 PHP 1.2.3 Cross Site Scripting Date: 2016/2/7 Researcher: 1N3 @CrowdShield - https://crowdshield.com Vendor Homepage: http://www.chartphp.com Software Link: http://www.chartphp.com Version: 1.2.3 CVE : N/A +- --=Description: Charts 4 PHP version 1.2.3 is vulnerable to...

Greenbone Networks Greenbone Security Assistant charts module cross-site scripting vulnerability

Greenbone Networks Greenbone Security Assistant GSA is a web interface that provides access to the OpenVAS service layer. charts is one of the charting modules. The charts module/opm URI in the Greenbone Networks GSA fails to adequately filter the 'aggregatetype' parameter in the getaggregat...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

IBM Tealeaf Customer Experience Information Disclosure Vulnerability

IBM Tealeaf Customer Experience is a SaaS-based analytics solution for web and mobile applications from IBM USA. The solution helps clients understand and improve the overall user experience through the analysis of data, supporting rich visualization and data exploration through the adoption of...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

Code injection

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

CentOS 6 : libreoffice (CESA-2015:1458)

Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Moderate: Red Hat Security Advisory: libreoffice security, bug fix, and enhancement update

Updated libreoffice packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Microsoft Word ptCount Element Uninitialized Memory Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

WordPress Tera Charts Multiple Directory Traversal Vulnerability

The WordPress plugin Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

Information disclosure - full path disclosure

Jira displays charts on the dashboard by writting a temporary file in Jira "tmp" folder and reading it through a page called "charts" When the filename provided to this page is not present, an error message displays the full path to the "tmp" folder, which lies in Jira directory. This is a...

Information disclosure - full path disclosure

Jira displays charts on the dashboard by writting a temporary file in Jira "tmp" folder and reading it through a page called "charts" When the filename provided to this page is not present, an error message displays the full path to the "tmp" folder, which lies in Jira directory. This is a...