3901 matches found
Cisco Jabber Guest Server Open Redirect Vulnerability
Cisco Jabber Guest Server is the United States of America Cisco Cisco company's set of users to interact with the enterprise staff in real time software. A security vulnerability exists in Cisco Jabber Guest Server, which arises from the program's failure to adequately enforce access controls on...
Security Bypass Vulnerabilities in Multiple Cisco Products
Cisco TelePresence Video Communication Server VCS and Cisco Expressway are both telepresence video communication servers from Cisco that integrate with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communicatio...
U.S. Dept Of Defense: DOM Based XSS on a DoD website
A DoD website was vulnerable to a DOM based cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. @juliocesar was able to demonstrate this vulnerability by crafting a specially...
Apache Struts Denial of Service Vulnerability (CNVD-2016-12020)
Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2. ...
CVE-2016-2869
Multiple cross-site scripting XSS vulnerabilities in the UI in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allow remote authenticated users to inject arbitrary web script or HTML via crafted fields in a URL...
Information Disclosure Vulnerability in Multiple Micro Focus Products
Micro Focus Host Access Management and Security Server MSS, formerly known as Attachmate Host Access Management and Security Server and others are products of Micro Focus, a British company.MSS is a MSS is a server that provides access management and security; Reflection for the Web RWeb, formerl...
U.S. Dept Of Defense: Information disclosure vulnerability on a DoD website
A Department of Defense website was misconfigured in a manner that could have exposed sensitive information about the web application or system. @reptou was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us!...
Directory traversal
Administrative Server in Micro Focus Host Access Management and Security Server MSS and Reflection for the Web RWeb and Reflection Security Gateway RSG and Reflection ZFE ZFE allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory...
U.S. Dept Of Defense: Cross-site scripting (XSS) vulnerability on a DoD website
A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @r0p3 was able to demonstrate this vulnerability by crafting a specially...
U.S. Dept Of Defense: Information disclosure vulnerability on a DoD website
A misconfigured Department of Defense webserver improperly disclosed application information. @clizsec was able to demonstrate this vulnerability by crafting a specially formatted URL...
CVE-2016-2926
Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0...
CVE-2016-0316
Cross-site scripting XSS vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Cross site scripting
Cross-site scripting XSS vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-2926
Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0...
CVE-2016-0316
Cross-site scripting XSS vulnerability in Lifecycle Query Engine LQE in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-9452
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL...
CVE-2016-9452
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL...
CVE-2016-9452
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL...
