5020 matches found
CVE-2016-1595
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language HQL injection attacks and obtain sensitive information via the entityName parameter...
CVE-2016-1596
CVE-2016-1596 affects Micro Focus/Novell Service Desk prior to 7.2, where multiple XSS flaws exist. Remote authenticated users can inject arbitrary web script or HTML via (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManuf...
CVE-2016-1657
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
UBUNTU-CVE-2016-1657
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
Design/Logic Flaw
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
CVE-2016-1657
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
chromium-browser: address bar spoofing
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...
Micro Focus Service Desk Cross-Site Scripting Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
Micro Focus Service Desk Arbitrary File Read Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
Micro Focus Service Desk HQL Injection Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
Micro Focus Service Desk Path Traversal Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
Novell Service Desk 7.1.0/7.0.3 / 6.5 - Multiple Vulnerabilities
Exploit for jsp platform in category web applications Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro email protected, Agile Information Security ================================================================================= Disclosure: 30/03/20...
Novell Service Desk 7.1.0 Code Execution / Information Disclosure
Hi, Novell Service Desk now rebranded as Micro Focus Service Desk 7.1.0 and below has a number of critical vulnerabilities that allow remote code execution, information disclosure, etc, by authenticated users. Check the full advisory below for details. Novell / Micro Focus have documented these...
Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities
Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 30/03/2016 / Last updated: 10/04/2016 Background on the...
FOCUS Online - Nachrichten - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application FOCUS Online - Nachrichten published at the 'play' market has multiple vulnerabilities...
Digital Detox, Balance & Focus - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Digital Detox, Balance & Focus published at the 'play' market has multiple vulnerabilities...
FOCUS Magazin - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application FOCUS Magazin published at the 'play' market has multiple vulnerabilities...
FOCUS Online | Top Nachrichten - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application FOCUS Online | Top Nachrichten published at the 'play' market has multiple vulnerabilities...
FOCUS-MONEY - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application FOCUS-MONEY published at the 'play' market has multiple vulnerabilities...