5 matches found
Bitdefender in processing PE code signing the organizationName field when there is buffer overflow vulnerability-vulnerability warning-the black bar safety net
A vulnerability summary This paper describes the Bitdefender PE engine in the presence of a buffer overflow vulnerability. Bitdefender provides“anti-malware antimalware”of the engine, the engine can be integrated to other security vendors ' products, Bitdefender in their products, such as...
ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS
The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...
Zoho ManageEngine AssetExplorer Cross-Site Scripting Vulnerability (CNVD-2015-04108)
Zoho ManageEngine AssetExplorer is a suite of asset management software from Zoho ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine AssetExplorer version 6.1 due to the VendorDef.do file failing to adequately filter the 'organizationName' parameter. A remote attacker can...
CVE-2015-5061: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do...
PT-2015-6759
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine AssetExplorer versions 6.1 service pack 6112 and earlier Description A cross-site scripting XSS issue allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the...