UBUNTU-CVE-2023-23603

Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log weren't accounting for external URLs. Data could then be potentially exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...

Vdisk locks are not clearing after shutting down a target from the PVS console running in Azure

PVS on Azure - When shutting down a target from the PVS console or the Azure portal vdisk locks are not releasing properly...

Oracle Enterprise Manager Cloud Control (Jan 2023 CPU)

The 13.4.0.0 and 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by a vulnerabiliy in the Application Config Console Google Gson component as referenced in the January 2023 CPU advisory. Easily exploitable vulnerability allows unauthenticated attack...

Enable Media Replace < 4.0.2 - Author+ Arbitrary File Upload

The plugin does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites. 1 As an Author, upload a picture via http://vulnerable-site.tld/wp-admin/upload.php 2 Press on the new picture's thumbnail to see the attachment's details 3...

Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to cross-site scripting in the Admin Console (CVE-2022-40750)

Summary IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console when using the Application Migration Report function. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

CVE-2014-125078

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identifie...

Cross site scripting

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identifie...

CVE-2014-125078

CVE-2014-125078 affects yanheven console. The vulnerability targets horizon/static/horizon/js/horizon.instances.js and enables cross-site scripting when an attacker manipulates unknown functionality, with remote attack potential. A patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd, ...

CVE-2014-125078 yanheven console horizon.instances.js cross site scripting

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identifie...

console 跨站脚本漏洞

console is a software application. tokio-console prototype A cross-site scripting vulnerability exists in console, which stems from some unknown functionality in the file horizon/static/horizon/js/horizon.instances.js that is manipulated to cause cross-site scripting...

PT-2023-10148 · Unknown · Yanheven Console

Name of the Vulnerable Software and Affected Versions: yanheven console affected versions not specified Description: A vulnerability was found in the yanheven console, classified as problematic, affecting some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The...

CVE-2022-3841

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery SSRF vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes RHACM. An attacker could take advantage of this as the console API endpoint is missing an...

CVE-2022-3841

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery SSRF vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes RHACM. An attacker could take advantage of this as the console API endpoint is missing an...

Server side request forgery (ssrf)

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery SSRF vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes RHACM. An attacker could take advantage of this as the console API endpoint is missing an...

CVE-2023-0018 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable...

SAP BusinessObjects Business Intelligence Platform 跨站脚本漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

CVE-2014-125070

A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function getzonehosts/AvailabilityZonesTable of the file openstackdashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can...

Cross site scripting

A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function getzonehosts/AvailabilityZonesTable of the file openstackdashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can...

CVE-2014-125070

The CVE-2014-125070 entry concerns the yanheven console/OpenStack Horizon component. Affected code is the function get_zone_hosts/AvailabilityZonesTable in openstack_dashboard/dashboards/admin/aggregates/tables.py, where input/handling leads to cross-site scripting. The vulnerability can be explo...

CVE-2014-125070 yanheven console tables.py AvailabilityZonesTable cross site scripting

A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function getzonehosts/AvailabilityZonesTable of the file openstackdashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can...