CVE-2020-9524

Micro Focus Enterprise Server and Enterprise Developer (all versions prior to 5.0 Patch Update 8) are affected by a Cross-Site Scripting (XSS) vulnerability in the web application layer. The root cause is insufficient validation of client-side data, enabling both stored and reflected XSS scenario...

CVE-2020-9524

Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker...

UBUNTU-CVE-2020-12394

A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulnerability affects Firefox 76...

CVE-2020-11842

Information disclosure vulnerability in Micro Focus Verastream Host Integrator VHI product, affecting versions earlier than 7.8 Update 1 7.8.49 or 7.8.0.49. The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view...

Information disclosure

Information disclosure vulnerability in Micro Focus Verastream Host Integrator VHI product, affecting versions earlier than 7.8 Update 1 7.8.49 or 7.8.0.49. The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view...

CVE-2020-11842

CVE-2020-11842 affects Micro Focus Verastream Host Integrator (VHI). The information disclosed describes an information‑sharing vulnerability that allows an unauthenticated attacker to view data they should not access, impacting versions prior to 7.8 Update 1 (7.8.49 or 7.8.0.49). The connected s...

CVE-2020-11842

Information disclosure vulnerability in Micro Focus Verastream Host Integrator VHI product, affecting versions earlier than 7.8 Update 1 7.8.49 or 7.8.0.49. The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view...

Micro Focus Enterprise Server and Enterprise Developer Insufficient Credential Protection Vulnerability

Micro Focus Enterprise Server and Micro Focus Enterprise Developer are both products of Micro Focus, a British company.Micro Focus Enterprise Server is an enterprise server. Micro Focus Enterprise Server is an enterprise server that provides a deployment environment for mainframe applications.Mic...

CVE-2020-9523

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

CVE-2020-9523

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

Design/Logic Flaw

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

CVE-2020-9523

The CVE-2020-9523 issue affects Micro Focus Enterprise Server and Micro Focus Enterprise Developer (MFDS context) where credentials are insufficiently protected. Affected: all versions prior to 4.0 Patch Update 16 and 5.0 Patch Update 6. Root cause: failure to adequately protect hashed credential...

CVE-2020-9523

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running t...

Staying Healthy, Focused, and Above All Grateful During the COVID-19 Crisis

By now, we are all subject in one way or another to the far-reaching impact of COVID-19. As we see on the news each day, the numbers of those infected by this deadly coronavirus continue to grow in terrifying increments. And even for those of us without family members or friends directly impacted...

Command Execution Vulnerability in Focused Notes

Focus Notes is a study notes software developed by Guangzhou Fenghe Technology Co. Focus Notes has a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...

Use-after-free

WebKitGTK+ is vulnerable to use-after-free. It allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving element focus...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to denial of service DoS. A focus stealing flaw was found in the way Firefox handled focus changes. A malicious website could use this flaw to steal sensitive data from a user, such as user names and passwords...

Focus Prevention Bypass

SeaMonkey is vulnerable to focus prevention bypass. A web page containing specially-crafted content could potentially trick a user into surrendering sensitive information...

Micro Focus Vibe Cross-Site Scripting Vulnerability (CNVD-2020-20429)

Micro Focus Vibe is a team collaboration management solution from Micro Focus UK. The solution has features such as file sharing, building dynamic forms and workflows. A cross-site scripting vulnerability exists in Micro Focus Vibe version 4.0.6. The vulnerability stems from the WEB application...

Micro Focus Vibe 4.0.6 HTML Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-046 Product: Micro Focus Vibe formerly Novelle Vibe Manufacturer: Micro Focus International plc Affected Versions: 4.0.6 Tested Versions: 4.0.6 Vulnerability Type: HTML Injection CWE-79 Risk Level: Low Solution Status: Fixed...