22 matches found
EUVD-2014-6185
Malware in sbrugna...
EUVD-2014-6188
Malware in sbrugna...
EUVD-2014-6186
Malware in sbrugna...
PNMsoft Sequence Kinetics Information Disclosure Vulnerability
PNMsoft Sequence Kinetics is a suite of intelligent workflow applications from PNMsoft that can organize modeling, design, and execution.Form Controls CSS is one of the control form CSS files. A security vulnerability exists in the Form Controls CSS file in PNMsoft Sequence Kinetics 7.5 and earli...
Multiple Cross-Site Scripting Vulnerabilities in PNMsoft Sequence Kinetics
PNMsoft Sequence Kinetics is a next-generation business process management suite released by Israel-based PNMsoft that enables rapid establishment of high-availability workflow applications and close human collaboration on change while maintaining lifecycle governance. Multiple cross-site scripti...
PNMsoft Sequence Kinetics Directory Traversal Vulnerability
PNMsoft Sequence Kinetics is a next-generation business process management suite released by Israel-based PNMsoft that enables rapid establishment of high-availability workflow applications and close human collaboration on change while maintaining lifecycle governance. A directory traversal...
PNMsoft Sequence Kinetics Denial of Service Vulnerability
PNMsoft Sequence Kinetics is a next-generation business process management suite released by Israel-based PNMsoft that enables rapid establishment of high-availability workflow applications and close human collaboration on change while maintaining lifecycle governance. A denial of service...
CVE-2014-6304
The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors...
CVE-2014-6303
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service resource consumption via a crafted XML document containing a large number of nested entity references, a...
CVE-2014-6302
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-6301
Multiple cross-site scripting XSS vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code injection
The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Xxe
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-6301
Multiple cross-site scripting XSS vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6302
The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-6304
CVE-2014-6304 affects PNMsoft Sequence Kinetics—the Form Controls CSS file—where information disclosure enables remote attackers to obtain sensitive source-code information. Public entries indicate impact for Sequence Kinetics versions up to 7.6 (CNVD reference cites 7.5 and earlier; NVD notes vu...
CVE-2014-6302
PNMsoft Sequence Kinetics prior to version 7.7 is affected by an XML External Entity (XXE) vulnerability in the Monitoring Administration pages, allowing remote attackers to read arbitrary files via XML external entity declarations combined with entity references. The root cause is XXE processing...
CVE-2014-6301
PNMsoft Sequence Kinetics is affected by XSS in the tables-management module for versions before 7.7. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors. No exploitation details are provided in the sources; a fix is implied by the 7.7 threshold (upgr...
CVE-2014-6303
Technical details about CVE-2014-6303 (affected product, version specifics, root cause, impact, or fixes) are not provided in the supplied Connected documents. Monitor for updates in official advisories for precise remediation information.