CVE-2015-7610

Cross-site request forgery CSRF vulnerability in the login form in Zimbra Collaboration Suite aka ZCS before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF...

CVE-2017-7425

CVE-2017-7425 corresponds to a cross-site scripting (XSS) vulnerability in NetIQ iManager Web UI. The connected CNVD entry confirms that versions prior to 2.7.7 Patch 10 HF2 and prior to 3.0.3.2 are affected, with a remote attacker able to execute arbitrary JavaScript in the context of the affect...

OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability

Summary OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. Description The vulnerability is caused due to the improper verification of uploaded files in...