Lucene search
+L

13118 matches found

CNVD
CNVD
added 2018/10/17 12:00 a.m.12 views

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker could exploit unauthorized...

7.7CVSS8.4AI score0.02019EPSS
SaveExploits0References1
Citrix
Citrix
added 2018/10/17 12:00 a.m.16 views

Cannot connect to vCenter from PVS Console using stronger SCHANNEL Protocols, such as TLS 1.2

When running the XenDesktop Setup Wizard or the Streamed VM Wizard, and connecting to a vCenter Server that has been configured to only accept connections using TLS 1.1 or higher, the PVS Console could present an error stating that the Connection was closed. The error shown will have a text simil...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2018/10/17 12:00 a.m.14 views

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2018-24320)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

4.3CVSS5.1AI score0.01528EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/17 12:00 a.m.14 views

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services (CNVD-2019-38561)

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker could exploit this vulnerabili...

5.8CVSS8.2AI score0.01969EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/16 12:00 a.m.12 views

JTBC(PHP) Arbitrary File Read Vulnerability

JTBC PHP is an open source CMS Content Management System. JTBC PHP 3.0.1.6 version of an arbitrary file reading vulnerability , a remote attacker can use /console//console/file/manage.php?type=list&path=c:/URL to exploit the vulnerability in the system to read arbitrary files...

7.5CVSS7AI score0.01515EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/10/16 12:00 a.m.14 views

BlackBerry UEM Management Console Information Disclosure Vulnerability

BlackBerry UEM is a unified endpoint management solution from BlackBerry Canada. The solution is used to manage endpoint devices and view their access.Management Console is one of the management console programs. An information disclosure vulnerability exists in Management Console in BlackBerry U...

7.5CVSS7.2AI score0.0109EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2018/10/12 1:29 p.m.7 views

CVE-2018-8890

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...

7.5CVSS5.6AI score0.0109EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/12 1:29 p.m.14 views

CVE-2018-8890

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...

7.5CVSS5.8AI score0.0109EPSS
SaveExploits0References1
NVD
NVD
added 2018/10/12 1:29 p.m.22 views

CVE-2018-8890

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...

7.5CVSS7.2AI score0.0109EPSS
SaveExploits0References1
Prion
Prion
added 2018/10/12 1:29 p.m.21 views

Information disclosure

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...

5CVSS7.2AI score0.0109EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/10/12 1:00 p.m.54 views

CVE-2018-8890

CVE-2018-8890 concerns a vulnerability in the BlackBerry UEM Management Console (versions 12.8.0 and 12.8.1) described as an information disclosure flaw. The issue could let an attacker take over a UEM user’s session and perform administrative actions in the context of that user. Public data prov...

7.5CVSS7.1AI score0.0109EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/10/12 1:00 p.m.30 views

CVE-2018-8890

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...

7.2AI score0.0109EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/10/12 12:00 a.m.56 views

VMware AirWatch Console 9.1.x < 9.1.5.6 / 9.2.x < 9.2.3.27 / 9.3.x < 9.3.0.25 / 9.4.x < 9.4.0.22 / 9.5.x < 9.5.0.16 / 9.6.x < 9.6.0.7 / 9.7.x < 9.7.0.3 SAML Security Bypass

According to its self-reported version, the install of VMware AirWatch Console running on the remote host is 9.1.x prior to 9.1.5.6, 9.2.x prior to 9.2.3.27, 9.3.x prior to 9.3.0.25, 9.4.x prior to 9.4.0.22, 9.5.x prior to 9.5.0.16, 9.6.x prior to 9.6.0.7, or 9.7.x prior to 9.7.0.3. It is,...

7.4CVSS7.5AI score0.01089EPSS
SaveExploits0References3
Veracode
Veracode
added 2018/10/11 7:28 a.m.34 views

Cross-Site Scripting (XSS)

ActiveMQ :: Web Console is vulnerable to cross-site scripting XSS attack. The attack is possible due to not properly encoding of QueueFilter parameter of web admin console on "queues.jsp"...

6.1CVSS5.9AI score0.57227EPSS
SaveExploits0References19Affected Software1
OSV
OSV
added 2018/10/10 2:29 p.m.5 views

DEBIAN-CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

6.1CVSS6.3AI score0.57227EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/10 2:29 p.m.6 views

UBUNTU-CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

6.1CVSS6.6AI score0.57227EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/10/10 2:00 p.m.39 views

CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

6AI score0.57227EPSS
SaveExploits0References10
OSV
OSV
added 2018/10/09 1:29 p.m.10 views

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.8AI score0.00968EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/09 1:29 p.m.22 views

CVE-2018-2466

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.3AI score0.00968EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/05 2:29 p.m.15 views

CVE-2018-15370

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

6.8CVSS5.8AI score0.00361EPSS
SaveExploits0References2
Rows per page
Query Builder