IBM Daeja ViewONE Professional and Standard & Virtual CD Security Vulnerabilities

IBM IBM Daeja ViewONE Standard is a suite of Web-based image viewers from IBM USA. The viewer supports quick and easy viewing, annotating, zooming, magnifying, scrolling, panning, rotating and printing of images and image documents. A security vulnerability exists in Daeja ViewONE Professional,...

Purgalicious VBA: Macro Obfuscation With VBA Purging

Malicious Office documents remain a favorite technique for every type of threat actor, from red teamers to FIN groups to APTs. In this blog post, we will discuss "VBA Purging", a technique we have increasingly observed in the wild and that was first publicly documented by Didier Stevens in Februa...

SuiteCRM Open Redirect Vulnerability

SuiteCRM is a free open source customer relationship management application. An open redirection vulnerability exists in the Documents module in SuiteCRM 7.11.13 and earlier versions. An attacker can exploit this vulnerability to redirect users to arbitrary URLs via specially crafted SVG document...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-15300

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...

CVE-2020-15300

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...

Cross site scripting

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

Open redirect

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by a stored Cross-Site Scripting (XSS) vulnerability in the Documents preview feature. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the Documents preview workflow. Root cause described across sources is stored XSS in the D...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-15300

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...

CVE-2020-15300

CVE-2020-15300 affects SuiteCRM up to version 7.11.13, with an Open Redirect in the Documents module triggered by a crafted SVG document. The underlying issue is an input/redirect handling weakness in the Documents feature, enabling a user-assisted redirect to an arbitrary URL. Impact is describe...

PT-2020-13934 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.11.13 Description: The issue is related to stored Cross-Site Scripting XSS in the Documents preview functionality. This could allow remote authenticated attackers to inject arbitrary web script or HTML. Recommendations: For...

PT-2020-14341 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.11.14 Description: The issue is related to an Open Redirect in the Documents module of SuiteCRM, which can be exploited via a crafted SVG document. Recommendations: For versions prior to 7.11.14, update to version...

CVE-2020-14208: Improper Neutralization of Input During Web Page Generation

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

SuiteCRM 输入验证错误漏洞

SuiteCRM is a free open source customer relationship management application. An open redirection vulnerability exists in the Documents module in SuiteCRM 7.11.13 and earlier versions. An attacker can exploit this vulnerability to redirect users to arbitrary URLs via specially crafted SVG document...

CVE-2020-15300: URL Redirection to Untrusted Site

SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...

Design/Logic Flaw

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the documen...

PT-2020-20934

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.0.1 Description The issue allows a local application to potentially enumerate the user's iCloud documents due to inadequate permissions logic. Recommendations For versions prior to 11.0.1, update to macOS Big Sur...