23 matches found
EUVD-2020-5892
Malware in sbrugna...
EUVD-2020-5894
Malware in sbrugna...
EUVD-2020-5893
Malware in sbrugna...
CVE-2020-13652
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting XSS vulnerability exists in the login menu...
CVE-2020-13651
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...
CVE-2020-13652
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting XSS vulnerability exists in the login menu...
CVE-2020-13650
An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery SSRF that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to ...
CVE-2020-13650
An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery SSRF that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to ...
Cross site scripting
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting XSS vulnerability exists in the login menu...
Design/Logic Flaw
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...
Server side request forgery (ssrf)
An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery SSRF that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to ...
CVE-2020-13650
An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery SSRF that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to ...
CVE-2020-13650
DigDash 2018R2 before p20200210 and 2019R1 before p20200210 are affected by a Server-Side Request Forgery (SSRF) on the login page, allowing use of the application as a proxy. External requests can disclose application credentials; internal requests can be blind, but error messages may indicate w...
CVE-2020-13651
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...
CVE-2020-13651
CVE-2020-13651 concerns DigDash versions (2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430). A user-supplied data input is used to generate the JNLP file that a client uses to obtain the Java application. By supplying an attacker-controlled URL, the client can retriev...
CVE-2020-13652
DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507 contain a cross-site scripting (XSS) vulnerability in the login menu. The issue is an XSS flaw in the login UI that can be triggered by user input. No exploitation or patch details are p...
CVE-2020-13652
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A cross-site scripting XSS vulnerability exists in the login menu...
PT-2020-13638
Name of the Vulnerable Software and Affected Versions DigDash versions 2018R2 before p20200528 DigDash versions 2019R1 before p20200421 DigDash versions 2019R2 before p20200430 Description An issue allows a user to provide data that will be used to generate the JNLP file used by a client to obtai...
PT-2020-13639
Name of the Vulnerable Software and Affected Versions DigDash versions 2018R2 before p20200528 DigDash versions 2019R1 before p20200528 DigDash versions 2019R2 before p20200430 DigDash versions 2020R1 before p20200507 Description A cross-site scripting XSS issue exists in the login menu...
CVE-2020-13651: Inclusion of Functionality from Untrusted Control Sphere
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client...