Page 6 of 54 results (0.009 seconds)

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-0948

https://notcve.org/view.php?id=CVE-2016-0948

10 Feb 2016 — Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de CSRF en Adobe Connect en versiones anteriores a 9.5.2 permite a atacantes remotos secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos. • http://www.securitytracker.com/id/1034978 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-0949

https://notcve.org/view.php?id=CVE-2016-0949

10 Feb 2016 — Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL. Adobe Connect en versiones anteriores a 9.5.2 permite a atacantes remotos tener un impacto no especificado a través de un parámetro manipulado en una URL. • http://www.securitytracker.com/id/1034978 •

CVSS: 6.1EPSS: 2%CPEs: 1EXPL: 0

CVE-2015-0344

https://notcve.org/view.php?id=CVE-2015-0344

13 Jun 2015 — Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en la aplicación web en Adobe Connect anterior a 9.4 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de vectores no especificados. • http://www.securitytracker.com/id/1032567 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2015-0343 – Adobe Connect 9.3 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2015-0343

11 Jun 2015 — Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Vulnerabilidad de XSS en admin/home/homepage/search en la aplicación web en Adobe Connect anterior a 9.4 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del parámetro query. Adobe Connect version 9.3 suffers from a cross site scripting vulnerability. • https://packetstorm.news/files/id/132269 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •