Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504719)

None None...

Kaspersky Master Configuration Wizard File Deletion

The vulnerability of the Master Configuration Wizard component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud antivirus products is related to errors in processing symbolic links. Exploiting this...

PT-2021-2526

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersk...

Nagios Docker security vulnerabilities

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A remote code execution vulnerability exists in the Nagios Docker Configuration Wizard in Nagios XI 5.7 and earlier. An attacker can...

Nagios XI Remote Code Execution Vulnerability (CNVD-2021-06864)

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. A remote code execution vulnerability exists in the Nagios Docker Configuration Wizard in Nagios XI 5.7 and earlier. An attacker can...

SAP NetWeaver AS JAVA Path Traversal Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A path traversal vulnerability exists in SAP Netweaver AS JAVA LM Configuration Wizard versions 7.30, 7.31, 7.40...

McAfee Endpoint Security Cross-Site Scripting Vulnerability

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....

CVE-2020-7333

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

CVE-2020-7333

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

Cross site scripting

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

CVE-2020-7333 Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS)

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

CVE-2020-7333

CVE-2020-7333 is a cross-site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) for Windows, present in versions prior to 10.7.0 (November 2020 Update). The vulnerability allows an attacker with admin access to inject arbitrary web script or HTML via the conf...

CVE-2020-7333: Improper Neutralization of Input During Web Page Generation

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

PT-2020-19562 · Mcafee · Mcafee Endpoint Security

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS versions prior to 10.7.0 November 2020 Update Description: The issue allows administrators to inject arbitrary web script or HTML via the configuration wizard, which is a result of a cross-site scripting...

CVE-2020-7333

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard...

CVE-2020-6287

SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create ...

CVE-2020-6286

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...

Path traversal

The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...

CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create ...