3465 matches found
2K Games Help Desk Platform Hacked to Spread Info-stealing Malware
By Deeba Ahmed Famous publisher 2K Games helpdesk platform was hacked where the attackers attempted to distribute malware to gamers devices.… This is a post from HackRead.com Read the original post: 2K Games Help Desk Platform Hacked to Spread Info-stealing Malware...
Security Bulletin: Open redirect and cross-site scripting vulnerabilities in the InfoSphere Streams help system (CVE-2012-2159, CVE-2012-2161)
Abstract Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM InfoSphere Streams Information Center 2.0.0.3 or 2.0.0.4 and InfoSphere Streams Studio 2.0 or later, allows potential redirection of users to arbitrary web sites. Cross-site scripting vulnerability in IBM Eclipse...
Security Bulletin: IBM OmniFind Enterprise Edition and IBM Content Analytics (CVE-2013-0599, CVE-2013-0464, CVE-2013-0467)
Abstract Potential security vulnerabilities exist in the IBM Eclipse Help System that is shipped with the IBM OmniFind Enterprise Edition and IBM Content Analytics products. Content The products listed below may be affected by security vulnerabilities in the IBM Eclipse Help System. This issue is...
Security Bulletin: Source disclosure in IBM InfoSphere Identity Insight’s Help System (CVE-2013-0467)
Abstract Identity Insight’s Help System could allow a remote attacker to obtain source of the Help System. Content SUMMARY: Identity Insight’s Help System could allow a remote attacker to obtain source of the Help System. VULNERABILITY DETAILS: CVE ID: CVE-2013-0467 CVSS: CVSS Base Score: 4 CVSS...
Security Bulletin: IBM Security SiteProtector System can be affected by a vulnerability in the IBM Eclipse Help System (IEHS) (CVE-2013-0467)
Abstract IBM Security SiteProtector System can be affected by a vulnerability in the IBM Eclipse Help System IEHS. This vulnerability could allow a remote attacker to obtain the source code of the Help System. Content VULNERABILITY DETAILS: CVEID: CVE-2013-0467 DESCRIPTION: IBM Security...
Security Bulletin: Cross-site scripting security vulnerability exists in IBM Eclipse Help System used in IBM Security zSecure Visual (CVE-2013-5449)
Abstract IBM Security zSecure Visual uses the IBM Eclipse Help System IEHS to provide product information center for end users. A cross site scripting vulnerability exists in IEHS. Content VULNERABILITY DETAILS CVE ID: CVE-2013-5449 DESCRIPTION: A remote attacker might exploit this vulnerability...
Security Bulletin: Content Manager Enterprise Edition with use of IBM Eclipse Help System (CVE-2013-0599, CVE-2013-0464, CVE-2013-0467)
Abstract Potential security vulnerabilities exist in the IBM Eclipse Help System that is shipped with the IBM Content Manager Enterprise Edition. Content Content: The products listed below may be affected by security vulnerabilities in the IBM Eclipse Help System. This issue is applicable only if...
Security Bulletin: IBM InfoSphere Information Server Suite: Source disclosure in InfoSphere information Server’s Help System (CVE-2013-0467)
Abstract Security Bulletin: IBM InfoSphere Information Server Suite: Source disclosure in InfoSphere information Server’s Help System CVE-2013-0467 Content SUMMARY: This bulletin addresses potential source disclosures in InfoSphere Information Server’s Help System VULNERABILITY DETAILS: CVE ID:...
Security Bulletin: Open Redirect and Cross-Site Scripting Vulnerabilities in IMS Enterprise Suite Explorer for Development Help System
Abstract IMS™ Explorer for Development bundles the IBM® Eclipse Help System IEHS which has a security vulnerability. Content SUMMARY: IMS Explorer for Development bundles the IBM Eclipse Help System IEHS which has a security vulnerability. VULNERABILITYDETAILS: CVE ID: CVE-2012-2159 DESCRIPTION:...
help-bankrot.ru Cross Site Scripting vulnerability OBB-2944553
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-XPVP-H73C-M9RQ Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
Jenkins 2.367 through 2.369 both inclusive does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control tooltips for this component. As of publication,...
CVE-2022-41224
Jenkins 2.367 through 2.369 both inclusive does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control tooltips for this component...
Jenkins 跨站脚本漏洞
Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A cross-site scripting vulnerability exists in Jenkins versions 2.367 through 2.369, which stems from a tooltip that does...
PT-2022-25739 · Jenkins · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.367 through 2.369 Description: The issue results in a stored cross-site scripting XSS vulnerability due to the lack of escaping tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI. This...
Security Bulletin: WebSphere Process Server (WPS) / IBM Business Process Manager (BPM) – Cross-site scripting security vulnerability in local help system
Summary A Cross-site scripting security vulnerability exists in the IBM Eclipse Help System, which is used to provide the product information centers for the IBM WebSphere Process Server and IBM Business Process Manager products. For more details about Cross-site Scripting XSS, see the Open Web...
CVE-2022-40324
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR 67258...
CVE-2022-40323
SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR 67241...
CVE-2022-40325
SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR 67262...
