EUVD-2019-13908

Malware in sbrugna...

EUVD-2015-6363

Malware in sbrugna...

Zoho ManageEngine ADSelfService Plus Email Spoofing Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An email spoofing vulnerability exists in Zoho ManageEngine...

CVE-2019-4301

BigFix Self-Service Application SSA is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML...

CVE-2019-4301

CVE-2019-4301 affects the BigFix Self-Service Application (SSA). The issue allows arbitrary code execution triggered by Javascript embedded in Running Message or Post Message HTML. The vulnerability is documented with CVSSv3.1 base score 8.4 (HIGH) and CVSSv2 base score 6.0 (MEDIUM). Exploitation...

PT-2020-10937

Name of the Vulnerable Software and Affected Versions BigFix Self-Service Application SSA affected versions not specified Description The issue allows for arbitrary code execution if Javascript code is included in Running Message or Post Message HTML. Recommendations At the moment, there is no...

CVE-2019-4301: Undefined Security Weakness

BigFix Self-Service Application SSA is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML...

Selfservice.exe Crashes on First Log On, Second Attempt Works

When a user attempts to logon it fails the first time and succeeds the second time. The first time selfservice.exe crashes. Self-service Plug-in exited unexpectedly. Exception was Object reference not set to an instance of an object. at Dazzle.AppMonitor.Control.Controller.WaitForLogoff at...

PT-2015-7244

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager version 10.61 Description The self-service application in Cisco Unified Communications Domain Manager allows remote authenticated users to cause a denial of service, resulting in a subapplication...

Cisco Unified Communications Domain Manager Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager CUCDM could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed requests by the self-service application on an affected CUCDM device. An...