EUVD-2014-5027

Malware in sbrugna...

EUVD-2014-5029

Malware in sbrugna...

EUVD-2014-5028

Malware in sbrugna...

Information disclosure

Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token...

CVE-2014-5131

Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse...

CVE-2014-5130

Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token...

Design/Logic Flaw

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...

CVE-2014-5132

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...

Design/Logic Flaw

Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse...

CVE-2014-5131

CVE-2014-5131 affects Avolve Software ProjectDox 8.1. The issue enables remote authenticated users to obtain sensitive information by exploiting ciphertext reuse: the application encrypts data identifiers without a randomized IV or with identical IVs in multiple locations, allowing an attacker to...

CVE-2014-5132

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...

CVE-2014-5130

Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token...

CVE-2014-5131

Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse...

CVE-2014-5132

CVE-2014-5132 affects Avolve Software ProjectDox 8.1. The vulnerability is a User Enumeration issue where a remote attacker can determine valid users via vectors related to email addresses. Documented details confirm that the application exposes user-existence information, enabling enumeration wi...

CVE-2014-5130

The CVE-2014-5130 entry applies to Avolve Software ProjectDox 8.1 . The vulnerability is described as an information disclosure where remote authenticated users can obtain sensitive data from other users via vectors involving a direct access token. The connected documentation confirms multiple re...

CVE-2014-5131: Exposure of Sensitive Information to an Unauthorized Actor

Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse...

CVE-2014-5130: Exposure of Sensitive Information to an Unauthorized Actor

Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token...

PT-2018-4256

Name of the Vulnerable Software and Affected Versions Avolve Software ProjectDox version 8.1 Description The issue allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token. Recommendations For Avolve Software ProjectDox version...

CVE-2014-5132: Exposure of Sensitive Information to an Unauthorized Actor

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses...

PT-2018-4258

Name of the Vulnerable Software and Affected Versions Avolve Software ProjectDox version 8.1 Description The issue allows remote attackers to enumerate users via vectors related to email addresses. Recommendations For Avolve Software ProjectDox version 8.1, at the moment, there is no information...