CVE-2022-22484

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, caused by plain text user account passwords potentially being stored in the browser's application command history. By accessing browser history, an attacker could exploit this...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

Cisco Firepower Management Center < 6.6.1 sftunnel MitM (cisco-sa-ftdfmc-sft-mitm-tc8AzFs2)

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation protection during initial device registration. An...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

CVE-2021-26258

Improper access control for the IntelR KillerTM Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access...

CVE-2021-26258

Improper access control for the IntelR KillerTM Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control for the IntelR KillerTM Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access...

CVE-2021-26258

Improper access control for the IntelR KillerTM Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access...

CVE-2021-26258

The CVE-2021-26258 issue affects Intel® Killer™ Control Center software prior to version 2.4.3337.0, described as Improper access control that may allow an authorized user to escalate privileges via local access. The vulnerability is rated CVSS v3.1 with a base score of 7.8 (HIGH) and involves lo...

多款Intel产品安全漏洞

IntelR SSDs, etc. are products of Intel Corporation Intel, U.S.A. IntelR SSDs are a type of solid state drive.IntelR OptaneTM SSDs are a new type of non-volatile memory.IntelR SSD DCs are a type of built-in solid state drive.IntelR SSD DCs are a type of built-in solid state drive. A security...

IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server Liberty is a Java application server from IBM built on top of the Open Liberty project. IBM WebSphere Application Server Liberty is vulnerable to an information disclosure vulnerability that originates when The vulnerability stems from the fact that when...

多款Intel产品竞争条件问题漏洞

IntelR OptaneTM SSD and IntelR SSD DC are both products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory, and IntelR SSD DC is a built-in solid state drive. A security vulnerability exists in multiple Intel products that stems from a race condition issue withi...

多款Intel产品安全漏洞

IntelR OptaneTM SSD, etc. are products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR SSD DC is a type of built-in solid state drive. . A security vulnerability exists in multiple Intel products th...

多款Intel产品安全漏洞

IntelR OptaneTM SSD, etc. are products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR SSD DC is a type of built-in solid state drive. . A security vulnerability exists in multiple Intel products th...

Intel Killer Control Center 安全漏洞

Intel Killer Control Center is a program from Intel Corporation USA that examines applications and sets priorities so that speed-critical applications can be allocated access bandwidth first. A security vulnerability exists in Intel Killer Control Center software prior to version 2.4.3337.0, whic...

Intel Memory Bug Poses Risk for Hundreds of Products

Chipmaker Intel is reporting a memory bug impacting microprocessor firmware used in “hundreds” of products. According to an advisory issued by the company on Tuesday, the bug is firmware-based and rated as “high” risk with a Common Vulnerability Scoring System CVSS score of 7. The vulnerability...

riverbendmarinecenter.com Cross Site Scripting vulnerability OBB-2614956

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...

CVE-2022-22774

The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerabili...