HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim’s Web browser within the security context of the hosting Web site and/or steal the victim’s cookie-based authentication credentials.

Published at: November 05, 2020 at 12:15PM
View on website

Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.

Published at: November 05, 2020 at 10:15AM
View on website

Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter.

Published at: November 04, 2020 at 03:15PM
View on website

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486

Published at: November 03, 2020 at 09:15AM
View on website

JUUKO K-800 (Firmware versions prior to numbers ending …9A, …9B, …9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.

Published at: November 02, 2020 at 04:15PM
View on website