273 matches found
EyesOfNetwork SQL Injection Vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. Multiple SQL injection vulnerabilities exist in EyesOfNetwork aka EON 5.0 and...
CVE-2016-6022
IBM Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 20007...
EMC RSA Web Threat Detection Cross-Site Scripting Vulnerability
EMC RSA Web Threat Detection is a suite of Web threat detection software from EMC Corporation. The software is used to collect and analyze real-time data from web traffic to provide intelligent real-time analysis of web sessions and user behavior. A cross-site scripting vulnerability exists in EM...
CVE-2016-0919
EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...
CVE-2016-2955
Cross-site scripting XSS vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
IBM Connections Information Disclosure Vulnerability (CNVD-2016-11535)
IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...
Coupon CMS URL Redirection Vulnerability
Coupon CMS is an open source PHP coupon system. The system supports the setup of chargeable coupons , which can effectively increase the income of the site . A URL redirection vulnerability exists in Coupon CMS version 5.00, as the program fails to adequately filter user-submitted input. A remote...
PHP 5.0.0 'xmldocfile()' Local Denial of Service Vulnerability
PHP is a new language for writing CGI programs. A local denial of service vulnerability exists in PHP 5.0.0 'xmldocfile', which can be exploited by an attacker to launch a denial of service attack...
Ecava IntegraXor SQL Injection Vulnerability
Ecava IntegraXor is a set of Web-based tools for creating and running HMI Human Machine Interface interfaces for SCADA systems from Ecava Malaysia. A SQL injection vulnerability exists in Ecava IntegraXor versions prior to 5.0 build 4522. A remote attacker can exploit the vulnerability to execute...
libXfixes: Integer overflow leading to heap-based buffer overflow
Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function...
PT-2009-1135
Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services IIS version 5.0 Description The issue allows remote attackers to steal cookies and authentication credentials or bypass the HttpOnly protection mechanism. This is achieved by using the undocumented TRACK...
PT-2004-2549 · Ipswitch · Ws Ftp
Name of the Vulnerable Software and Affected Versions: WS FTP version 5.0.2 Description: The issue allows remote authenticated users to cause a denial of service, specifically CPU consumption, by sending a CD command with an invalid path containing a "../" sequence. Recommendations: For WS FTP...
2020-12 .NET 5.0.1 Update for x64 Client
2020-12 .NET 5.0.1 Update for x64 Client...