Show filters
105 Total Results
Displaying 61-70 of 105
Sort by:
Attacker Value
Unknown
CVE-2016-3475
Disclosure Date: July 21, 2016 (last updated November 25, 2024)
Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console.
0
Attacker Value
Unknown
CVE-2013-4754
Disclosure Date: December 26, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php or (2) the Title field to prefs.php.
0
Attacker Value
Unknown
CVE-2014-7418
Disclosure Date: October 19, 2014 (last updated October 05, 2023)
The BBC Knowledge Magazine (aka com.magzter.bbcknowledge) application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
0
Attacker Value
Unknown
CVE-2014-2737
Disclosure Date: April 22, 2014 (last updated October 05, 2023)
SQL injection vulnerability in the get_active_session function in the KTAPI_UserSession class in webservice/clienttools/services/mdownload.php in KnowledgeTree 3.7.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the u parameter, related to the getFileName function.
0
Attacker Value
Unknown
CVE-2013-3616
Disclosure Date: September 24, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitrary web script or HTML via the username parameter.
0
Attacker Value
Unknown
CVE-2012-0988
Disclosure Date: September 20, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) login.php, (2) admin.php, or (3) preferences.php.
0
Attacker Value
Unknown
CVE-2009-4192
Disclosure Date: December 03, 2009 (last updated October 04, 2023)
Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2008-5858
Disclosure Date: January 06, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.
0
Attacker Value
Unknown
CVE-2008-5857
Disclosure Date: January 06, 2009 (last updated October 04, 2023)
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
0
Attacker Value
Unknown
CVE-2008-5264
Disclosure Date: November 28, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action.
0
