80 matches found
Important: Red Hat Security Advisory: linux-firmware security, bug fix, and enhancement update
An update for linux-firmware is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2018-2169
This CVE-2018-2169 entry is rejected per the initial description.
Security Bulletin: ClearQuest Cross-Site Scripting (XSS) Vulnerability (CVE-2012-2169)
Summary IBM Rational ClearQuest Web client contains a Cross-Site Scripting vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...
CVE-2016-2169
Cloud Foundry CVE-2016-2169 affects Cloud Foundry Cloud Controller: capi-release versions before 1.0.0 and cf-release versions before v237. The issue is a business-logic flaw where an application could create a route that conflicts with a platform service route, causing traffic intended for the s...
Uber: It's possible to view configuration and/or source code on uchat.awscorp.uberinternal.com without
Summary Configuration file and/or source code information leakage without Uber OneLogin SSO authentication. Security Impact Misconfiguration on the server results in information leakage without authentication. Reproduction Steps...
CVE-2017-2169
CVE-2017-2169 affects the WordPress plugin MaxButtons and MaxButtons Pro prior to version 6.19. The vulnerability is a cross-site scripting (CWE-79) issue that could allow a remote attacker to cause arbitrary script execution in a logged-in user’s browser via unspecified vectors. Product: MaxButt...
ManageEngine AssetExplorer < 6.1.0 Build 6113 Multiple XSS
The version of ManageEngine AssetExplorer running on the remote host is prior to 6.1.0 build 6113. It is, therefore, affected by multiple cross-site scripting XSS vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of input to the Publisher name before...
ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting
ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their...
ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting
Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...
CVE-2015-2169
Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned...
CVE-2015-2169
Concretely, CVE-2015-2169 affects ManageEngine AssetExplorer 6.1.x prior to build 6113, with XSS via Publisher name input and also via organizationName in VendorDef.do. Root cause: improper input validation leading to script/HTML injection in authenticated sessions (though some entries note unaut...
CVE-2015-2169
Cross-site scripting XSS vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned...
ManageEngine Asset Explorer 6.1 Cross Site Scripting
Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...
CVE-2014-2169
Cisco TelePresence TC/TE Software 4.x–6.x (before 6.2.0 for TC and 6.0 for TE) is affected by CVE-2014-2169: remote authenticated users can execute arbitrary commands by passing commands as arguments to internal system scripts (CSCue60211). The vulnerability is exposed in how user-supplied input ...
Ubuntu: Security Advisory (USN-2169-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Django regression (USN-2169-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2169-2 advisory. USN-2169-1 fixed vulnerabilities in Django. The upstream security patch for CVE-2014-0472 introduced a regression for certain applications. This update fixes the...
Ubuntu 14.04 LTS : Django vulnerabilities (USN-2169-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2169-1 advisory. Benjamin Bach discovered that Django incorrectly handled dotted Python paths when using the reverse function. An attacker could use this issue to cause...