CVE-2019-19613

Halvotec RaQuest 10.23.10801.0 admin login page is vulnerable to an Open Redirect. An attacker on the same network can modify the victim’s request to redirect to a malicious site after authentication; fixed in Release 24.2020.20608.0.

CVE-2019-19613: URL Redirection to Untrusted Site

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request...

CVE-2018-3671

Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information...

CVE-2018-3671: Undefined Security Weakness

Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information...

CVE-2018-1000095: Improper Neutralization of Input During Web Page Generation

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Design/Logic Flaw

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201: Undefined Security Weakness

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...