4178 matches found
CVE-2019-16957
SolarWinds Web Help Desk 12.7.0 is affected by a Cross‑Site Scripting (XSS) vulnerability that can be triggered via the First Name field of a User Account. The issue is documented in CVE-2019-16957 and is consistently described across multiple feeds (NVD, Red Hat, CNVD, CVE lists). The connected ...
CVE-2020-27340
The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...
Improper access control
The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...
CVE-2020-27340
The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...
CVE-2019-16957: Improper Neutralization of Input During Web Page Generation
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account...
CVE-2020-27340: Undefined Security Weakness
The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...
Solarwinds WebHelpDesk 跨站脚本漏洞
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the "name" field of a user account...
Mitel Networks MiCollab 输入验证错误漏洞
Mitel MiCollab is an enterprise collaboration software and tools platform solution. An insufficient access control vulnerability exists in the online help portal in Mitel MiCollab versions prior to 9.2. An attacker could exploit the vulnerability by executing a malicious script to redirect users ...
PT-2020-9847
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows for cross-site scripting XSS attacks via the First Name field of a User Account. This means an attacker can inject malicious scripts into the website, potentially stealing us...
Solarwinds WebHelpDesk 跨站脚本漏洞
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via an SVG document uploaded in a...
PT-2020-9846
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk version 12.7.0 Description The issue allows for cross-site scripting XSS via an uploaded SVG document in a request. This means an attacker could potentially inject malicious scripts into the system by uploading a...
CVE-2019-16955: Improper Neutralization of Input During Web Page Generation
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...
PT-2020-16670
Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions prior to 9.2 Description The issue allows an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control in the online help portal. Recommendations For version...
Support Live Chat
In more than 4 months since Qualys launched Support Live Chat on the Customer Support Portal, we’ve seen customers use it successfully to get answers to quick support questions. Based on its success, we are scaling internal processes to accommodate greater usage, and we encourage all customers to...
SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)
This update for xen fixes the following issues : Security issue fixed : CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 bsc1178591. Non-security issue fixed : Adjusted help for --maxiters, default is 5 bsc1177950. Note that Tenable Network Security has...
Obfuscator - The Program Is Designed To Obfuscate The Shellcode
The program is designed to obfuscate the shellcode. Currently the tool supports 2 encryption. 1 XOR 2 AES The tool accepts shellcode in 4 formats. 1 base64 2 hex 3 c 4 raw Command Line Usage Usage Description ----- ----------- /f Specify the format of the shellcode base64 hex c raw /enc Specify t...
SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2020-73322)
SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to inject arbitrary web script or HTML via a "location name"...
CVE-2019-16958
Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...
