7972 matches found
IBM WebSphere Application Server Liberty Profile Cross-Site Scripting Vulnerability
IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform.Liberty Profile is a WAS dynamic server Liberty Profile is a...
KLA10874 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory...
KLA10873 Multiple vulnerabilities in Microsoft Server Software
Multiple serious vulnerabilities have been found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface. obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper email messages parsing can be...
CVE-2016-3008
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...
CVE-2016-2997
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-300...
CVE-2016-2995
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-300...
CVE-2016-2956
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008...
CVE-2016-2954
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008...
CVE-2016-3008
Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/media/platform/msm/camerav2/sensor/actuator/msmactuator.c component of Qualcomm’s Android operating system is related to improper handling of user interface elements. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a...
Legal Robot: Click Jacking
Hey legalRobot! I have found Click Jacking type of Vulnerability in your Website Now The Question is What is Click Jacking. Click Jacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06646)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...
IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-06647)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...
CloudForms: Lack of field filters on user input
It was found that the CloudForms web UI did not properly filter input in certain fields. A remote, authenticated attacker could use this flaw to execute arbitrary code on the system running CloudForms...
foreman: API and UI actions/URLs not limited to the orgs/locations assigned
It was found that the foreman API and UI actions and URLs are not properly limited to the organizations and locations they were assigned to. This could allow an attacker to view and update other organizations and locations in the system that they should not be allowed to...
Bluetooth Smart MITM Framework: BtleJuice
Bluetooth Smart MITM Framework BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...
KLA10850 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions or conduct another unknown impact. Below is a complete list of vulnerabilities 1. Lack of restriction...
KLA10852 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, spoof user interface, bypass security restrictions, conduct cross-site scripting or read local...
[SECURITY] Fedora 23 Update: kf5-plasma-5.24.0-1.fc23
KDE Frameworks 5 Tier 3 framework is foundation to build a primary user int erface...
[SECURITY] Fedora 24 Update: kf5-plasma-5.24.0-1.fc24
KDE Frameworks 5 Tier 3 framework is foundation to build a primary user int erface...