1761 matches found
CVE-2016-9738
CVE-2016-9738 affects IBM QRadar SIEM where default password requirements are weak, facilitating account compromise. IBM security bulletin confirms affected versions: QRadar SIEM 7.2.0–7.2.8 Patch 6 and 7.3.0–7.3.0 Patch 1. The root cause is that strong passwords were not required by default. Imp...
CVE-2017-1234
IBM QRadar SIEM is affected by a stored XSS in the Web UI for QRadar versions 7.2.0–7.2.8 Patch 6 and 7.3.0–7.3.0 Patch 1. The vulnerability could allow arbitrary JavaScript execution in a trusted session and may lead to credentials disclosure. Remediation provided through patches: 7.2.8 Patch 7 ...
System Integrity Management Platform: SIMP
System Integrity Management Platform The System Integrity Management Platform SIMP is an Open Source framework designed around the concept that individuals and organizations should not need to repeat the work of automating the basic components of their operating system infrastructure. Expanding...
Cisco Nexus 5000 Series Switches NX-OS System Software Command Injection Vulnerability
Cisco Nexus 5000 Series Switches are the Cisco Nexus series of data center-class switches from Cisco, Inc.Cisco NX-OS System Software is the data center operating system that runs on them. A command injection vulnerability exists in the CLI of Cisco NX-OS System Software versions 7.1 through 7.3 ...
Cross site scripting
EMC RSA Adaptive Authentication On-Premise versions prior to 7.3 P2 exclusive contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...
Schneider Electric Wonderware InduSoft Web Studio
CVSS v3 7.3 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: Wonderware InduSoft Web Studio Vulnerability: Incorrect Default Permissions AFFECTED PRODUCTS The following versions of Schneider Electric’s Wondeware InduSoft Web Studio are affected: Wonderware InduSoft Web...
CVE-2016-9750
IBM QRadar SIEM versions 7.2 and 7.3 store user credentials in plaintext, readable by an authenticated user. Affected products/versions: IBM QRadar SIEM 7.2 and 7.3. Root cause: credentials stored in clear text. Potential impact: unauthorized access to credentials by authenticated users (no remot...
CVE-2017-3507
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...
MySQL Cluster 7.3.x < 7.3.17 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)
The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.17. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...
IBM Tivoli Application Dependency Discovery Manager Cross-Site Scripting Vulnerability
IBM Tivoli Application Dependency Discovery Manager TADDM is a product in a suite of IT service management solutions from IBM USA that provides robust automated application mapping and discovery to help administrators understand the structure, state, configuration and change history of business...
CVE-2016-8927
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2016-8925
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the system. IBM X-Force ID: 118538...
CVE-2016-8927
CVE-2016-8927 affects IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.2 and 7.3. The vulnerability is a cross-site scripting issue in the Web UI that could allow an authenticated user to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted se...
FATEK Automation PLC Ethernet Module
CVSS v3 7.3 ATTENTION: Remotely exploitable. Low skill level to exploit. Vendor: FATEK Automation Equipment: PLC Ethernet Module Vulnerability: Stack-based buffer overflow AFFECTED PRODUCTS The affected Ethercfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to...
Cross Site Scripting injection vulnerability in SANADATA SanaCMS 7.3
Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Vendor HomePage: https://www.sanadata.com/ Version : 7.3 Dork : intext:"SANADATA | SanaCMS 7.3" Tested on:Firefox...
Cross site scripting
Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter...
CVE-2017-6518
Cross-site scripting XSS vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter...
CVE-2017-6518
CVE-2017-6518 is a Cross-site scripting (XSS) vulnerability in SANADATA SanaCMS 7.3, exploitable via the txtFrom parameter in /sanadata/seo/index.asp. The affected component is SanaCMS 7.3; the root cause is improper handling of user-supplied input leading to script/HTML injection. Impact describ...
Sandata SanaCMS 7.3 Cross Site Scripting
Exploit Title: SANADATA | SanaCMS 7.3 Cross Site Scripting Exploit Author: Hosein Askari Vendor HomePage: https://www.sanadata.com/| Version : 7.3 Dork : intext:"SANADATA | SanaCMS 7.3" Tested on:Parrot OS Date: 3-2-2017 Category: webapps Vulnerability Path :...