4178 matches found
Security Bulletin: Vulnerabilities in IBM Rational Synergy's Help System (CVE-2013-0464, CVE-2013-0467, CVE-2013-0599)
Summary IBM Rational Synergy can be affected by three vulnerabilities in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Synergy help content. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
Design/Logic Flaw
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
CVE-2019-16959
SolarWinds Web Help Desk 12.7.0 is affected by a CSV Injection (Formula Injection) vulnerability via a file attached to a ticket. The issue is described consistently across sources (CVE-2019-16959, Red Hat CVE page, NVD record). The exact root cause is not elaborated beyond the CSV/Formula Inject...
SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73160)
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via an SVG document uploaded in a...
Mitel MiCollab Insufficient Access Control Vulnerability
Mitel MiCollab is an enterprise collaboration software and tools platform solution. An insufficient access control vulnerability exists in the online help portal in Mitel MiCollab versions prior to 9.2. An attacker could exploit the vulnerability by executing a malicious script to redirect users ...
PT-2020-9849
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. Recommendations For SolarWinds Web Help Desk version 12.7.0, consider restricting the ability...
CVE-2019-16959: Improper Neutralization of Formula Elements in a CSV File
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...
SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73161)
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "name" field of a user account...
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
CVE-2019-16955
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
Cross site request forgery (csrf)
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
Design/Logic Flaw
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...
CVE-2019-16955
CVE-2019-16955 affects SolarWinds Web Help Desk 12.7.0 and is a cross-site scripting (XSS) vulnerability triggered by an uploaded SVG document in a request. The root cause is improper handling of SVG uploads leading to script injection. Public documents (NVD, Red Hat, CNVD) confirm the issue; no ...