CVE-2023-30469 Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00...

CVE-2023-30469 Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00...

Hitachi Ops Center Analyzer 跨站脚本漏洞

Hitachi Ops Center Analyzer is a data center management software from Hitachi, Japan. It monitors, reports, and correlates end-to-end performance from servers to storage. A security vulnerability exists in Hitachi Ops Center Analyzer versions 10.9.1-00 through 10.9.2-00, which stems from the...

PT-2023-22708 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.9.1-00 through 10.9.2-00 Description: The issue is a Cross-site Scripting vulnerability that allows Reflected XSS, specifically affecting the detail view component of Hitachi Ops Center Analyzer...

Exploit for Injection in Atlassian Confluence_Data_Center

go-exploit: Go Exploit Framework !Gohttps://github.com/vu...

GHSA-5GJ6-62G7-VMGF Hazelcast vulnerable to unmasked password exposure

In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

Hazelcast vulnerable to unmasked password exposure

In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

CVE-2023-33264

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

CVE-2023-33264

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

Design/Logic Flaw

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

CVE-2023-33264

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

PT-2023-7546 · Hazelcast · Hazelcast

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 5.0.0 through 5.0.4 Hazelcast versions 5.1.0 through 5.1.6 Hazelcast versions 5.2.0 through 5.2.3 Description: The issue is related to insufficient protection of registration data in the Hazelcast platform, which can be...

Student Study Center Desk Management System SQL Injection Vulnerability

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in Student Study Center Desk Management System v1.0, which originates from the lack of validation of externally entered SQL statements in adminreportsindex.phpdatefro...

Cisco DNA Center Command Execution Vulnerability

Cisco DNA Center is a network management and command center service from Cisco USA. A command execution vulnerability exists in Cisco DNA Center Software. The vulnerability stems from the application's inadequate validation of user-supplied input in API request parameters and can be exploited by ...

Cisco DNA Center Authorization Issues Vulnerability

Cisco DNA Center is a network management and command center service from Cisco USA. Cisco DNA Center is vulnerable to an authorization issue. The vulnerability stems from improper authorization of API requests and can be exploited by an authenticated, remote attacker to read information from a...

Cisco DNA Center Information Disclosure Vulnerability (CNVD-2023-62938)

Cisco DNA Center is a network management and command center service from Cisco USA. An information disclosure vulnerability exists in Cisco DNA Center. The vulnerability stems from improper authorization of API requests and can be exploited by an authenticated, remote attacker to read information...

Cisco DNA Center Privilege Escalation (cisco-sa-dnac-privesc-QFXe74RS)

The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.6 or is 2.3.4.x. It is, therefore, affected by a privilege escalation vulnerability. Due to unintended exposure of sensitive information in the web-based management interface, an authenticated remote attacker can inspe...

Cisco DNA Center Information Disclosure (cisco-sa-dnac-multiple-kTQkGU3)

The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.5. It is, therefore, affected by an information disclosure vulnerability. Due to improper authorization of API requests, a remote attacker with low privileges can send a specific API request to an affected device to re...

Cisco DNA Center Information Disclosure (cisco-sa-dnac-infodisc-pe7zAbdR)

The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.7 or is 2.3.5.0. It may, therefore, be affected by an information disclosure vulnerability if configured for PnP operation and to push configuration files to other Cisco external devices on the network. Due to improper...

Cisco DNA Center Multiple Vulnerabilities (cisco-sa-dnac-multiple-kTQkGU3)

The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.7 or 2.3.5.3. It is, therefore, affected by multiple vulnerabilities: - Insufficient validation of user-supplied input in API request parameters. An authenticated, remote attacker can send specially crafted API request...