CVE-2018-19439: Improper Neutralization of Input During Web Page Generation

XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 but was fixed in later versions including 5.4. helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter...

PT-2018-2868

Name of the Vulnerable Software and Affected Versions Oracle Secure Global Desktop versions prior to 5.4 Description The issue exists due to inadequate protection of the web page structure in the administration console. This can allow a remote attacker to execute arbitrary code in the user's...

CVE-2006-6618: Undefined Security Weakness

AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6622: Undefined Security Weakness

Soft4Ever Look 'n' Stop LnS 2.05p2 before 20061215 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623: Undefined Security Weakness

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6619: Undefined Security Weakness

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...