7160 matches found
PT-2020-5236 · Microsoft · Windows Error Reporting +1
Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Error Reporting service of Windows operating systems. This can allow an attacker to obtain...
Citrix Secure Mail for Android Security Update
Description of Problem Vulnerabilities have been discovered in CitrixSecure Mailfor Androidthatcould allowunauthorisedaccessto datawithinCitrix Secure Mail. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|--- CVE-2020-8274|...
Microsoft Windows Error Reporting Information Disclosure Vulnerability
Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An information disclosure vulnerability exists in Microsoft Windows...
Microsoft Windows Error Reporting Security Vulnerability
Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific problems. A security vulnerability exists in Microsoft Windows Error Reportin...
Fortinet FortiGate Cross-Site Scripting Vulnerability
Fortinet FortiGate is a suite of network security platforms from the U.S.-based company Fiat Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller and WAN acceleration. FortiGate suffers from a cross-site scripting...
The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2020-68256)
IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. IBM Jazz Reporting Service has a security vulnerability that makes it susceptible to stored...
The vulnerability of the Windows Error Reporting error reporting service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Windows Error Reporting registration service on Microsoft Windows operating systems is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
Fuji Electric V-Server Lite
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: V-Server Lite Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for remote code execution on the device. 3. TECHNICAL DETAILS 3.1...
Arbitrary File Read Vulnerability in UFIDA NC-IUFO Reporting System
UFIDA Network Technology Co. Founded in 1988, UFIDA is an advanced global provider of cloud services, software, and financial services for enterprises and public organizations. An arbitrary file read vulnerability exists in the UFIDA NC-IUFO Reporting System, which can be exploited by attackers t...
CVE-2020-4718
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2020-4718
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Cross site scripting
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2020-4718
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2020-4718
IBM Jazz Reporting Service (JRS) versions 6.0.6, 6.0.6.1, 7.0, and 7.0.1 are affected by CVE-2020-4718: a stored cross-site scripting vulnerability in the Web UI that could lead to credentials disclosure within a trusted session. The root cause is a vulnerability in the Report Builder shipped wit...
Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2020-4718)
Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4718 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...
IBM Jazz Reporting Service 跨站脚本漏洞
IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. IBM Jazz Reporting Service has a security vulnerability that makes it susceptible to stored...
Citrix Hypervisor Security Update
Description of Problem A security issue has been identified in Citrix Hypervisor that may allow privileged code running in a guest VM to infer details of some computations occurring in other VMs on the host. This may, for example, be used to infer a secret encryption key used by a web server in a...
The vulnerability of the Installation component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Oracle Hospitality Reporting and Analytics’ installation component is related to lack of access control measures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...