OPENSUSE-SU-2019:1849-1 Security update for chromium

This update for chromium to version 76.0.3809.87 fixes the following issues: - CVE-2019-5850: Use-after-free in offline page fetcher boo1143492 - CVE-2019-5860: Use-after-free in PDFium boo1143492 - CVE-2019-5853: Memory corruption in regexp length check boo1143492 - CVE-2019-5851: Use-after-pois...

CVE-2019-1954 Cisco Webex Meetings Server Open Redirection Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to...

Cisco Webex Meetings Server Open Redirection Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to...

CVE-2019-4193

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

Information disclosure

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

CVE-2019-4193

IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032...

CVE-2019-4193

IBM Jazz for Service Management versions 1.1.3–1.1.3.2 expose sensitive information via URL parameters, enabling potential disclosure if URLs are logged or exposed through referrers or browser history. The IBM advisory (and NVD entry) confirm the affected product and the risk vector, with CVSS de...

PT-2019-16958 · Ibm · Ibm Jazz For Service Management

Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management versions 1.1.3 through 1.1.3.2 Description: The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties gain access to the URLs...

Security Bulletin: IBM Jazz for Service Management stores sensitive information in URL parameters (CVE-2019-4193)

Summary IBM Jazz for Service Management stores sensitive information in URL parameters Vulnerability Details CVEID: CVE-2019-4193 DESCRIPTION: IBM Jazz for Service Management stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have acces...

CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...

My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting (XSS)

Triggered via unescaped usage of URL parameters in multiple locations presented in the public view of a site. PoC http://www.domain.de/?rsd=%27%3E%3Csvg%2Fonload%3Dconfirm%2FOPENBUGBOUNTY%2F%3E...

CVE-2018-20140

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

CVE-2018-20140

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

Cross site scripting

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

CVE-2018-20140

CVE-2018-20140 affects ZenPhoto 1.4.14. The vulnerability is described as multiple cross-site scripting (XSS) flaws exploitable via different URL parameters (e.g., SEARCH_state, SEARCH_country, SEARCH_city). The issue is caused by improper handling of user input in these parameters, enabling inje...

CVE-2018-20807

CVE-2018-20807 affects Pulse Secure Pulse Connect Secure (PCS) via an XSS in welcome.cgi. Affected: PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, 8.3.x before 8.3R3. Root cause: improper sanitization of a URL parameter in the WEB app, enabling client-side script execution. Impact: client-side code...

CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...

Information disclosure

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...