EUVD-2018-18799

Malware in sbrugna...

EUVD-2018-18800

Malware in sbrugna...

EUVD-2010-0245

Malware in sbrugna...

EUVD-2011-0449

Malware in sbrugna...

EUVD-2018-18798

Malware in sbrugna...

SUSE CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

Server side request forgery (ssrf)

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

Xxe

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action...

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action...

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action...

CVE-2018-7056

CVE-2018-7056 affects RoomWizard prior to version 4.4.x. The vulnerability allows remote attackers to obtain potentially sensitive information about IP addresses via the endpoint /getGroupTimeLineJSON.action. The NVD data indicates a Confidentiality impact of Partial with no Integrity/Availabilit...

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter...

CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7057

CVE-2018-7057 affects RoomWizard before 4.4.x, where an XSS flaw exists in the HelpAction.action pageName parameter. The vulnerability is caused by unsanitized input in the pageName parameter, enabling script injection. The connected records corroborate the vulnerability description, but do not p...

CVE-2018-7055

CVE-2018-7055 affects RoomWizard, specifically GroupViewProxyServlet, prior to version 4.4.x. The underlying issue is an SSRF vulnerability triggered through the url parameter, enabling a remote attacker to induce server-side requests. The provided connected sources confirm the vulnerability but ...