1047 matches found
Remote code execution
Remote Code Execution vulnerability in the web interface in McAfee Web Advisor WA 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack...
CVE-2019-3670 Remote Code Execution vulnerability
Remote Code Execution vulnerability in the web interface in McAfee Web Advisor WA 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack...
CVE-2019-3670
The CVE-2019-3670 entry affects McAfee Web Advisor (WA) via its web interface, with vulnerable versions <= 8.0.34745. The root cause is a cross-site scripting flaw that enables remote, unauthenticated attackers to execute arbitrary code on affected systems. This yields a remote code execution ...
CVE-2019-3670: Improper Neutralization of Input During Web Page Generation
Remote Code Execution vulnerability in the web interface in McAfee Web Advisor WA 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack...
PT-2020-10906
Name of the Vulnerable Software and Affected Versions McAfee Web Advisor versions 8.0.34745 and earlier Description The issue allows a remote unauthenticated attacker to execute arbitrary code via a cross-site scripting attack. This is a Remote Code Execution vulnerability in the web interface...
CVE-2018-21033
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets CSS token sequence. Hitachi Command Suite includes...
Design/Logic Flaw
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets CSS token sequence. Hitachi Command Suite includes...
CVE-2018-21033
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets CSS token sequence. Hitachi Command Suite includes...
CVE-2018-21033
The CVE-2018-21033 vulnerability affects Hitachi Command Suite (and related products) prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00, and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00. The issue allows authenticated remote users to load an arbitrary CSS token sequen...
PT-2020-8678
Name of the Vulnerable Software and Affected Versions Hitachi Command Suite versions prior to 8.6.2-00 Hitachi Automation Director versions prior to 8.6.2-00 Hitachi Infrastructure Analytics Advisor versions prior to 4.2.0-00 Description A vulnerability allows authenticated remote users to load a...
CVE-2018-21033: Improper Input Validation
A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets CSS token sequence. Hitachi Command Suite includes...
CVE-2020-2093
A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...
CVE-2020-2093
A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...
CVE-2020-2094
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...
CVE-2020-2094
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient...
Design/Logic Flaw
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...
CVE-2020-2094
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...
CVE-2020-2094
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...
CVE-2020-2094
A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient...