CVE-2016-3409

Cross-site scripting XSS vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 102637...

CVE-2016-3408

CVE-2016-3408 affects Zimbra Collaboration Suite prior to 8.7.0, where an XSS vulnerability could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (Bug 101813). The issue is tied to Zimbra’s web interface and is described across multiple feeds as a cross-site ...

CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...

CVE-2016-3410

CVE-2016-3410 affects Zimbra Collaboration Suite prior to 8.7.0, with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (bugs 103956, 103995, 104475, 104838, 104839). Public sources (NVD, CNVD, OpenVAS) describe impact as cross...

CVE-2016-3408

Cross-site scripting XSS vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bug 101813...

CVE-2016-3412

CVE-2016-3412 refers to multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration prior to version 8.7.0. The description indicates remote attackers could inject arbitrary web script or HTML through unspecified attack vectors (bugs 103997, 104413, 104414, 104777, 104791). The co...

CVE-2016-3402

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167...

CVE-2016-3407

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 104222, 104910, 105071, and 105175...

CVE-2016-3404

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959...

CVE-2016-3410

Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

Design/Logic Flaw

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

CVE-2017-2957 is an Adobe Acrobat/Reader use-after-free vulnerability in the JavaScript engine (collaboration functionality) that could lead to arbitrary code execution. Affected products and versions include Acrobat/Reader on Windows and macOS: 15.020.20042 and earlier, 15.006.30244 and earlier,...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

Box.com Plugs Account Data Leakage Flaw

Box.com has changed the way it handles publicly shared accounts and folders after a researcher found confidential documents and data belonging to Box.com users via Google, Bing and other search engines. While Box.com maintains this is a case of its customers unintentionally over-sharing, it says ...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (cisco-sa-20161207-pca)

Cisco Prime Collaboration Assurance is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...