CVE-2021-36563

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

PT-2021-11112 · Mimosa · Mimosa B5C +1

Name of the Vulnerable Software and Affected Versions: Mimosa B5, B5c, and C5x firmware versions through 2.8.0.2 Description: The web console for the affected firmware allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access t...

Mikrotik RouterOs 安全漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. An assertion failure vulnerability exists in the /nova/bin/console process in Mikrotik RouterOs version 6.44.5. An...

CVE-2021-2214

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HT...

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Console component in Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0,...

Oracle Storage Cloud Software Appliance 安全漏洞

Oracle Storage Cloud Software Appliance is an application from Oracle Corporation, USA. It provides a storage function A security vulnerability exists in Oracle Storage Cloud Software Appliance Management Console Prior to 16.3.1.4.2, which allows a highly privileged attacker with network access v...

@codeanywhere/theia-plugin-ext (>=1.11.0 <=1.11.4), @devworkspace-theia/webviews (>=0.0.1-alpha.1 <=0.0.2) +49 more potentially affected by CVE-2021-28161 via @theia/console (>=0.10.0-next.a2cdb337 <=1.8.0-next.632a67a5)

@theia/console NPM version =0.10.0-next.a2cdb337, =1.11.0, =0.0.1-alpha.1, =0.8.1-alpha.1, =0.0.1-1583345065, =0.0.2, =1.58.6, =1.64.0, =1.73.0-next.2, =0.1.0-next.4b3e6c8a, =0.1.0-next.4b3e6c8a, =0.3.16, =0.3.14, =0.16.0-next.f114ded2 and more Source cves: CVE-2021-28161 Source advisory:...

The vulnerability in the web console of the Prisma Cloud Compute security platform allows a hacker to bypass existing security restrictions.

The vulnerability of the web console of the Prisma Cloud Compute security platform is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2020-35664

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting XSS in the console...

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. Acronis Cyber Protect 15 Update 1 build 26172 has a cross-site scripting vulnerability that stems from cross-site scripting XSS in the console. . No detailed vulnerability details are available at this time...

CVE-2021-21025

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in its lack of access control mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

Cisco SD-WAN vManage Authorization Bypass Vulnerability (CNVD-2020-62341)

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the SSH console of the Web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker to access sensitive informati...

CVE-2021-2109

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...

CVE-2020-4918

IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392...

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient verification of input data. This vulnerability allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

CVE-2020-28574

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

Red Hat Single Sign-On Security Vulnerability

Red Hat Single Sign-On is an authentication and access control system from the American company Red Hat Red Hat. The tool is responsible for authentication and access control functions for the system, supports most authentication protocols Oauth, OpenId Connect, etc., and can be easily integrated...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...