|
254981
|
7.8 |
HIGH
Local
|
skyboxsecurity
|
skybox_manager_client_application
|
Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be …
|
NVD-CWE-noinfo
|
CVE-2017-14773
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254982
|
3.3 |
LOW
Local
|
skyboxsecurity
|
skybox_manager_client_application
|
Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing…
|
CWE-200
Information Exposure
|
CVE-2017-14772
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254983
|
5.5 |
MEDIUM
Local
|
skyboxsecurity
|
skybox_manager_client_application
|
Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the app…
|
CWE-20
Improper Input Validation
|
CVE-2017-14771
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254984
|
5.5 |
MEDIUM
Local
|
skyboxsecurity
|
skybox_manager_client_application
|
Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debu…
|
CWE-200
Information Exposure
|
CVE-2017-14770
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254985
|
9.8 |
CRITICAL
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramewo…
|
CWE-611
XXE
|
CVE-2017-14759
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254986
|
8.8 |
HIGH
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.…
|
CWE-89
SQL Injection
|
CVE-2017-14758
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254987
|
8.8 |
HIGH
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/down…
|
CWE-89
SQL Injection
|
CVE-2017-14757
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254988
|
6.1 |
MEDIUM
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/Deployment (…
|
CWE-79
Cross-site Scripting
|
CVE-2017-14756
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254989
|
6.1 |
MEDIUM
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Cross-Site Scripting: /xAdmin/html/XPressoDoc, …
|
CWE-79
Cross-site Scripting
|
CVE-2017-14755
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254990
|
6.5 |
MEDIUM
Network
|
opentext
|
document_sciences_xpression
|
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to Arbitrary File Read: /xAdmin/html/cm_datasource…
|
CWE-22
Path Traversal
|
CVE-2017-14754
|
2024-11-21 12:13 |
2017-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|