IBM Cognos Analytics Content Spoofing Vulnerability

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A content...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (cisco-sa-20151008-pcp)

A vulnerability in web framework of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to execute unauthorized SQL queries. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Cisco Prime Collaboration Assurance Open Redirect Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. The web interface of Cisco Prime Collaboration Assurance versions 10.5 through 11.0 does not properly validate HTTP request parameters. A remote attacker could use this vulnerability to cause the...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2016-02252)

Cisco Unity Connection UC is a voice messaging platform from Cisco. The platform can use voice commands to make calls or listen to messages in a "hands-free" way. A cross-site scripting vulnerability exists in Cisco UC 11.0 and earlier versions. A remote attacker can exploit this vulnerability by...

Manage Engine EventLog Analyzer 11.0 Build 11000 Cross Site Scripting

Multiple Cross Site Scripting Attack - ManageEngine EventLog Analyzer v.11.0 Build 11000 Overview----------------------------------------------------------------------------------------------------------------------------- Vendor: Manage Engine Vulnerable Product: EventLog Analyzer v.11.0 Build...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates (CTX206001)

A number of vulnerabilities have been identified in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that could allow a malicious, unprivileged user to perform privileged operations or execute commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

Cisco Unified Email Interaction Manager and Unified Web Interaction Manager Cross-Site Scripting Vulnerabilities

Cisco Unified Email Interaction Manager is a product from Cisco that is used to manage large volumes of customer email submitted to corporate mailboxes or websites. A cross-site scripting vulnerability exists in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0. Thi...

[security bulletin] HPSBST02937 rev.1 - HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03995204 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03995204 Version: 1 HPSBST02937 rev....

Tiki Wiki CMS Groupware version 11.0 contains a cross-site scripting (XSS) vulnerability

Overview Tiki Wiki CMS Groupware version 11.0 and possibly earlier versions contain a cross-site scripting XSS vulnerability CWE-79. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Tiki Wiki CMS Groupware version 11.0 and possibly earlier...

Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

Symantec Enterprise Security Manager/Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Pale Moon Web Browser 11.0 Denial Of Service

Pale Moon Multi Looping By eidelweiss function eidelweiss window.onerror=new Function"history.go0"; window.print; eidelweiss; eidelweiss;...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Aug11

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnwin01aug11.nasl 7015 2017-08-28 11:51:24Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Aug11 Authors: Rachana Shetty Copyright: Copyrigh...