91 matches found
CVE-2017-14838
TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...
CVE-2017-14840
TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...
CVE-2017-14839
CVE-2017-14839 affects TeamWork Photo Fusion. Connected records corroborate an arbitrary file upload vulnerability in the changeAvatar and changeCover functionality. The core issue is the ability to upload files without proper restriction in these modules, enabling potential impact as described a...
CVE-2017-14838
TeamWork Job Links is vulnerable to an arbitrary file upload in the profileChange and coverChange modules. The root cause is an improper validation/handling of uploaded files, allowing a remote attacker to upload arbitrary files. Impact noted in sources includes the ability to upload files remote...
CVE-2017-14840
CVE-2017-14840 affects TeamWork TicketPlus. A vulnerability in updateProfile allows Arbitrary File Upload, enabling an attacker to upload arbitrary files via the updateProfile function. Documented impact from CVSSv3 indicates high severity (Impact: Confidentiality, Integrity, Availability all Hig...
Visual Paradigm Server 10.0 Cross Site Scripting Vulnerability
Visual Paradigm Server version 10.0 suffers from a cross site scripting vulnerability. ================================================================ Visual Paradigm Server v10.0 - Cross Site Scripting XSS ================================================================ Information...
Microsoft Office Groove Insecure Library Loading
Added: 03/28/2011 CVE: CVE-2010-3146 BID: 42695 OSVDB: 67484 Background Microsoft Office Groove is a collaboration-based software application that allows teams and organizations to work together regardless of physical or network location. Problem Microsoft Office Groove has a vulnerability due to...
CVE-2005-4414
Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu security bug."...
CVE-2005-4414
Technical details for CVE-2005-4414 are not publicly available in the provided documents. Monitor for updates.