1994 matches found
PT-2019-18037
Name of the Vulnerable Software and Affected Versions Safari versions prior to 12.0.3 iOS versions prior to 12.1.3 Description A cross-site scripting issue existed due to inadequate URL validation, which could lead to a cross-site scripting attack when processing maliciously crafted web content...
CVE-2019-6228: Improper Neutralization of Input During Web Page Generation
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack...
COYO Cross-Site Scripting Vulnerability
COYO is a social intranet software. COYO suffers from a cross-site scripting vulnerability. The vulnerability is due to a lack of URL validation by the program and can be exploited by an attacker to execute javascript code in the user context using malicious use of missed access...
Security Updates for Microsoft Office Viewers And Compatibility Products (February 2019)
The Microsoft Office Viewers and Compatibility Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file,...
Description of the security update for Word Viewer: February 12, 2019
None None...
Description of the security update for Office 2016: February 12, 2019 (KB4462146)
None None...
Description of the security update for Office 2010: February 12, 2019
Description of the security update for Office 2010: February 12, 2019 Summary This security update resolves a security feature bypass vulnerability that exists when Microsoft Office does not validate URLs. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
PT-2019-1474
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to a security feature bypass when Microsoft Office fails to properly validate URLs. This could allow a remote attacker to trick a user into entering credentials ...
UBUNTU-CVE-2018-4345
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
CVE-2018-4345
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
SAP NetWeaver Open Redirect Vulnerability
SAP NetWeaver is an integrated, service-oriented application platform that provides a development and runtime environment for SAP applications. An open redirection vulnerability exists in SAP NetWeaver, which stems from the program failing to adequately validate URLs, and can be exploited by a...
CVE-2018-2476
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
Design/Logic Flaw
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
CVE-2018-2476
Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...
CVE-2018-2476
CVE-2018-2476 is a SAP NetWeaver open redirect vulnerability caused by insufficient URL validation in forums, affecting SAP NetWeaver versions 7.30, 7.31, and 7.40. The vulnerability enables redirection to a malicious site and requires user interaction to exploit. CVSS details in the record indic...
PT-2018-15592
Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.30, 7.31, 7.40 Description The issue is due to insufficient URL validation in forums, allowing an attacker to redirect users to a malicious site. Recommendations For SAP NetWeaver version 7.30, update the URL validatio...
CVE-2018-4309
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
PT-2018-16524
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to iOS 12 Apple Safari versions prior to tvOS 12 Apple Safari version prior to 12 Apple iTunes version prior to 12.9 for Windows Apple iCloud for Windows version prior to 7.7 Description A cross-site scripting issue...
Security Bulletin: Cross-site scripting vulnerability in WebSphere Lombardi Edition redirect-login mechanism (CVE-2014-6101)
Summary WebSphere Lombardi Edition uses a mechanism to silently login users who have previously authenticated themselves. This mechanism is vulnerable to cross-site scripting attacks. Vulnerability Details CVE ID:CVE-2014-6101 DESCRIPTION: WebSphere Lombardi Edition is vulnerable to cross-site...