8358 matches found
CVE-2017-15404
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page...
Privilege escalation
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page...
CVE-2017-15404
CVE-2017-15404 affects Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113. The issue involves processing crash dumps with root privileges and improper symlink handling, enabling local privilege escalation via a crafted HTML page. The Chrome OS update 61.0.3163.113 addresses this...
Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit
Exploit for windows platform in category local exploits Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as ...
CVE-2017-15404: Time-of-check Time-of-use (TOCTOU) Race Condition
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page...
CVE-2018-1918
IBM Jazz Reporting Service (JRS) is affected by CVE-2018-1918 in the Lifecycle Query Engine (LQE) shipped with JRS 6.0.3–6.0.6. The vulnerability is a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted sessio...
CVE-2018-1918
IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...
CVE-2018-1918
IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...
Cross site scripting
IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...
CVE-2018-1918
IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...
PT-2019-9755
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 6.0.3 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
CVE-2018-1918: Improper Neutralization of Input During Web Page Generation
IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...
GHSA-J88M-953W-8R2C rendertron XSS vulnerability
Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting XSS from invalid URLs...
rendertron XSS vulnerability
Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting XSS from invalid URLs...
How CB LiveOps Helps with IT Hygiene
Security and IT Operations teams often have no reliable way to assess the current state of endpoints across their enterprise, leading to increased risk of breach, inability to make informed remediation decisions, and unnecessary spending on infrastructure maintenance. A real-time endpoint query a...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2019-00558)
IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...
CUBA Platform Reporting Addon Cross-Site Scripting Vulnerability
CUBA Platform is an open source Java Web framework for enterprise applications . Reporting Addon aka Reports Addon is one of the reporting addon . A cross-site scripting vulnerability exists in Reporting Addon in CUBA Platform 6.10.x and earlier versions 2019-01-02 and earlier. A remote attacker...
Security Bulletin: Security vulnerability affects the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2018-1918)
Summary There is a security vulnerability in the Lifecycle Query Engine LQE shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2018-1918 DESCRIPTION: IBM Jazz Reporting Service JRS is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
mergerjournal.com XSS vulnerability
Open Bug Bounty ID: OBB-719946 Description| Value ---|--- Affected Website:| mergerjournal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...