7158 matches found
CVE-2020-4541
CVE-2020-4541 affects IBM Jazz Reporting Service (JRS) 7.0 and 7.0.1 with a cross-site scripting vulnerability in the Report Builder, allowing injected JavaScript in the Web UI and potential credential disclosure within a trusted session. The vulnerability details indicate the impact is limited t...
CVE-2020-4541
IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183039...
CVE-2020-4539
IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2020-4539
CVE-2020-4539 affects IBM Jazz Reporting Service (JRS) versions 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1. The issue is a cross-site scripting vulnerability that allows an attacker to embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4533
CVE-2020-4533 affects IBM Jazz Reporting Service (JRS) in versions 6.0.6, 6.0.6.1, and 7.0. The root cause is a cross-site scripting (XSS) vulnerability that allows embedded arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected produc...
CVE-2020-4533
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...
rubberducky.us Cross Site Scripting vulnerability OBB-1254299
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
drk-wersen-bueren.de Cross Site Scripting vulnerability OBB-1253836
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jfxsz.com Cross Site Scripting vulnerability OBB-1253492
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2020-4541)
Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4541 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the...
Security Bulletin: Security vulnerability affects the Lifecycle Query Engine that is shipped with Jazz Reporting Service (CVE-2020-4539)
Summary There is a security vulnerability in the Lifecycle Query Engine shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4539 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
Security Bulletin: Security vulnerability affects the Lifecycle Query Engine that is shipped with Jazz Reporting Service (CVE-2020-4533)
Summary There is a security vulnerability in the Lifecycle Query Engine shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2020-4533 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
officefood.nl Cross Site Scripting vulnerability OBB-1253220
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Chalumeau - Automated, Extendable And Customizable Credential Dumping Tool
Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsing Mimikatz...
ebookers.ie Cross Site Scripting vulnerability OBB-1252380
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
amsterdameconomicboard.com Cross Site Scripting vulnerability OBB-1252340
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the Global Protect Agent’s endpoint protection software lies in the lack of protection for service data, which allows attackers to read VPN cookie information.
The vulnerability of the reporting component of the Global Protect Agent for Linux software lies in the lack of protection for service data. Exploiting this vulnerability could allow attackers to read VPN cookie information...
Geutebrück G-Cam and G-Code
1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Geutebrück Equipment: G-Cam and G-Code Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code...
galletti.com Cross Site Scripting vulnerability OBB-1250118
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bvtgroep.nl Cross Site Scripting vulnerability OBB-1247733
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...