EUVD-2016-3985

Malware in sbrugna...

EUVD-2018-12113

Malware in sbrugna...

EUVD-2018-12112

Malware in sbrugna...

EUVD-2016-3987

Malware in sbrugna...

EUVD-2019-14038

Malware in sbrugna...

IBM Rational Publishing Engine Cross-Site Scripting Vulnerability (CNVD-2020-05095)

IBM Rational Publishing Engine is a set of document automation solutions from IBM. The program can generate Rational product documentation , but also supports the choice of other vendors to generate documentation for the application . A cross-site scripting vulnerability exists in IBM Rational...

CVE-2019-4431

IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2019-4431: Improper Neutralization of Input During Web Page Generation

IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Cross site scripting

IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1533: Improper Neutralization of Input During Web Page Generation

IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1534: Improper Neutralization of Input During Web Page Generation

IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Security Bulletin: Vulnerabilities affect Document Builder component in IBM Rational Publishing Engine (CVE-2016-2912, CVE-2016-2914)

Summary Vulnerabilities in the IBM Rational Publishing Engine affects the Document Builder RPENG. Vulnerability Details CVEID: CVE-2016-2912 DESCRIPTION: IBM Rational Publishing Engine is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker...

CVE-2016-2912

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-2914

CVE-2016-2914 affects IBM Rational Publishing Engine’s Document Builder in version 2.0.1 before ifix002. The issue is an unrestricted file upload caused by improper validation of file extensions, allowing a remote authenticated attacker to upload a malicious file and potentially execute code on t...

CVE-2016-2912

CVE-2016-2912 is associated with IBM Rational Publishing Engine (RPENG) – Document Builder. The IBM Security Bulletin states that RPENG 2.0.1 before ifix002 is vulnerable to cross‑site scripting: a remote authenticated attacker can inject arbitrary script/HTML via a crafted URL due to insufficien...

CVE-2016-2914: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension...

CVE-2016-2912: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...