Denis Werner

An issue in the Teamwire Windows desktop client allows a remote attacker to obtain sensitive information via a crafted payload to the `message` function.

The issue allows a remote attacker to obtain sensitive information via a crafted payload to the `global search function`. This is a Cross Site Scripting vulnerability.

A Cross Site Scripting (XSS) issue allows a remote attacker to obtain sensitive information via a crafted payload to the `chat name`, `message preview`, `username`, and `group name` components. This enables the attacker to potentially exploit these components and gain access to confidential data.

The issue arises from insufficient escaping on the user-supplied `table prefix` parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database.

The issue is related to a missing capability check on the `get restore progress()` and `restore()` functions, allowing unauthorized access. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a Denial of Service (DoS).

The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing unencrypted UDP traffic.

The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a `password` parameter.

The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing unencrypted UDP traffic.

The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a `password` parameter.

The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

The issue allows an attacker on the same network to cause a denial-of-service of the device by sending long input values.

The device is susceptible to a denial-of-service attack when an attacker on the same network sends long input values.

The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing unencrypted UDP traffic.

The issue allows an attacker on the same network to bypass authentication via a web-administration request that lacks a `password` parameter.

The issue allows an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.

The issue allows an attacker on the same network to cause a denial-of-service of the device by sending long input values.

The issue affects the admin interface of the Grouptime Teamwire Client, allowing stored XSS attacks.

The issue allows code injection via a template, leading to remote code execution.

The issue allows an attacker with access to the Sync Gateway's public REST API to extract sensitive data or call arbitrary N1QL functions through the parameters `startkey` and `endkey` on the " all docs" endpoint. By issuing nested queries with CPU-intensive operations, they may cause increased resource usage and denial of service conditions.