Lucene search
+L

5020 matches found

Cvelist
Cvelist
added 2016/04/22 10:00 a.m.36 views

CVE-2016-1595

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information via the entityName parameter...

6.4AI score0.06606EPSS
SaveExploits3References5
CVE
CVE
added 2016/04/22 10:00 a.m.79 views

CVE-2016-1596

CVE-2016-1596 affects Micro Focus/Novell Service Desk prior to 7.2, where multiple XSS flaws exist. Remote authenticated users can inject arbitrary web script or HTML via (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManuf...

5.4CVSS5.5AI score0.02427EPSS
SaveExploits3References5Affected Software1
OSV
OSV
added 2016/04/18 10:59 a.m.10 views

CVE-2016-1657

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

4.3CVSS5.6AI score0.01425EPSS
SaveExploits0References10
OSV
OSV
added 2016/04/18 10:59 a.m.8 views

UBUNTU-CVE-2016-1657

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

4.3CVSS7.3AI score0.01425EPSS
SaveExploits0References3
Prion
Prion
added 2016/04/18 10:59 a.m.26 views

Design/Logic Flaw

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

4.3CVSS6.4AI score0.01425EPSS
SaveExploits0References10Affected Software4
Cvelist
Cvelist
added 2016/04/18 10:00 a.m.44 views

CVE-2016-1657

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

5.9AI score0.01425EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2016/04/18 7:25 a.m.10 views

chromium-browser: address bar spoofing

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

4.3CVSS7.4AI score0.01425EPSS
SaveExploits0References5
CNVD
CNVD
added 2016/04/14 12:00 a.m.11 views

Micro Focus Service Desk Cross-Site Scripting Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

5.4CVSS6.2AI score0.02427EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/04/14 12:00 a.m.12 views

Micro Focus Service Desk Arbitrary File Read Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

6.5CVSS7AI score0.06902EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/04/14 12:00 a.m.12 views

Micro Focus Service Desk HQL Injection Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

6.5CVSS7.2AI score0.06606EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/04/14 12:00 a.m.11 views

Micro Focus Service Desk Path Traversal Vulnerability

Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...

7.2CVSS7.7AI score0.64142EPSS
SaveExploits7References1
zdt
zdt
added 2016/04/11 12:00 a.m.93 views

Novell Service Desk 7.1.0/7.0.3 / 6.5 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro email protected, Agile Information Security ================================================================================= Disclosure: 30/03/20...

6.5CVSS0.4AI score0.64142EPSS
SaveExploits7
Packet Storm
Packet Storm
added 2016/04/11 12:00 a.m.68 views

Novell Service Desk 7.1.0 Code Execution / Information Disclosure

Hi, Novell Service Desk now rebranded as Micro Focus Service Desk 7.1.0 and below has a number of critical vulnerabilities that allow remote code execution, information disclosure, etc, by authenticated users. Check the full advisory below for details. Novell / Micro Focus have documented these...

6.5CVSS6.1AI score0.64142EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2016/04/11 12:00 a.m.75 views

Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities

Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 30/03/2016 / Last updated: 10/04/2016 Background on the...

7.2CVSS6.2AI score0.64142EPSS
SaveExploits7
hackapp
hackapp
added 2016/04/01 9:37 a.m.14 views

FOCUS Online - Nachrichten - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application FOCUS Online - Nachrichten published at the 'play' market has multiple vulnerabilities...

7.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:22 a.m.14 views

Digital Detox, Balance & Focus - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Digital Detox, Balance & Focus published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:16 a.m.9 views

FOCUS Magazin - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application FOCUS Magazin published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:16 a.m.9 views

FOCUS Online | Top Nachrichten - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application FOCUS Online | Top Nachrichten published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:01 a.m.8 views

FOCUS-MONEY - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application FOCUS-MONEY published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/03/25 12:00 a.m.12 views

Micro Focus Network Automation Detection

Binary data hpnetworkautomationdetect.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder