Visual Paradigm Server跨站脚本漏洞

No description provided by source...

Visual Paradigm Server Cross-Site Scripting Vulnerability

Visual Paradigm Server is a Hong Kong, China Visual Paradigm company's set of enterprise project design tools , it contains design sharing , wireframe diagrams and database design . A cross-site scripting vulnerability exists in Visual Paradigm Server. Due to the program failing to adequately...

Microsoft VBScript and JScript Scripting Engine Information Disclosure Vulnerability (CNVD-2015-08015)

Microsoft Internet Explorer IE is a web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.Microsoft VBScript known as Visual Basic Script is a scripting language, and is also the default programming language for ASP dynamic web pages. JScript ...

Microsoft VBScript and JScript Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer IE is a web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.Microsoft VBScript known as Visual Basic Script is a scripting language, and is also the default programming language for ASP dynamic web pages. JScript ...

Visual Paradigm Server 10.0 Cross Site Scripting Vulnerability

Visual Paradigm Server version 10.0 suffers from a cross site scripting vulnerability. ================================================================ Visual Paradigm Server v10.0 - Cross Site Scripting XSS ================================================================ Information...

Visual Paradigm Server 10.0 Cross Site Scripting

================================================================ Visual Paradigm Server v10.0 - Cross Site Scripting XSS ================================================================ Information -------------------- Name: Visual Paradigm Server v10.0 - Cross Site Scripting XSS Affected Softwar...

SAP 3D Visual Enterprise Viewer 3DM File Buffer Overflow

A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Viewer. The vulnerability is caused by improper validation of the size value read from a Rhino 3D Model 3DM file. By enticing a user to open a crafted 3DM file with the affected application, an attacker could possibly exploit this...

SAP 3D Visual Enterprise Viewer Flic Animation Buffer Overflow

A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Viewer. The vulnerability is caused by improper boundary check when copying image data. By enticing a user to open maliciously crafted Flic animation file with the affected application, an attacker can exploit this vulnerability t...

SAP 3D Visual Enterprise Viewer Buffer Overflow Vulnerability

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A buffer overflow vulnerability exists in SAP 3D Visual Enterprise Viewer VEV. A remote attacker could exploit this vulnerability...

CVE-2015-8030

SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...

Buffer overflow

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

CVE-2015-8030

The CVE-2015-8030 entry concerns SAP 3D Visual Enterprise Viewer (VEV). Affected component/file handling falls under four 3D/image formats (U3D, LWO, JPEG2000, FBX). The root cause is a bounds/array index issue when processing these file types, enabling remote code execution. Exploitation require...

CVE-2015-8029

SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption...

CVE-2015-8028

Multiple buffer overflows in SAP 3D Visual Enterprise Viewer VEV allow remote attackers to execute arbitrary code via a crafted 1 3DM or 2 Flic Animation file...

CVE-2015-8029

CVE-2015-8029 affects SAP 3D Visual Enterprise Viewer (VEV). The vulnerability arises in the handling of Filmbox documents, where a crafted Filmbox file can trigger memory corruption and allow remote code execution on vulnerable installations. The advisory notes that exploitation requires user in...

CVE-2015-8030

SAP 3D Visual Enterprise Viewer VEV allows remote attackers to execute arbitrary code via a crafted 1 U3D, 2 LWO, 3 JPEG2000, or 4 FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities...

CVE-2007-3144

Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication...

CVE-2007-4225

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...

Apple iTunes < 12.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the WebKit, CoreText, and ICU components, and in the bundled version of the Microsoft Visual Studio C++ Redistributable Package. An attacker can exploit these...