13135 matches found
CVE-2017-14801 Reflected xss in Admin Console REST interface
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...
CVE-2017-14802
CVE-2017-14802 affects Micro Focus Novell Access Manager Admin Console and IDP servers prior to version 4.3.3, which expose an unvalidated redirect vulnerability that could be exploited by remote attackers to redirect users to third‑party sites. The public records indicate impacted products are N...
Micro Focus Operations Orchestration JMiniX Multiple Vulnerabilities
The remote Operations Orchestration server is affected by information disclosure and denial of service attacks when the JMiniX JMX console is accessible. Note that in order to safely identify a vulnerable host, Nessus has only tested for the information disclosure flaw. C Tenable Network Security...
antMan < 0.9.1a - Authentication Bypass
Exploit Title: antMan and the password to a url-encoded linefeed %0a, we can force the authentication script to produce return values not anticipated by the developer. To exploit these defects, use a web proxy to intercept the login attempt and modify the POST parameters as follows:...
vDisk Lost Properties in PVS Console
vDisk lost properties in PVS consoleafter move vDisk to individual file server with MS DFS enabled,vDisk is shown as No server and filesize can not be identified...
Multiple Cross-Site Scripting Vulnerabilities in Symantec Management Console
Symantec Management Console is Symantec's web-based user interface for managing Symantec Management Platform and other installed solutions. Symantec Management Console has multiple cross-site scripting vulnerabilities that stem from the program failing to properly validate user input. An attacker...
CVE-2017-12191
A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC VMWare Remote Console functions that may not be appropriate for users of CloudForms and thus this account. An attacker could use this vulnerability t...
Important: Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update
An update is now available for CloudForms Management Engine 5.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
CFME: VMRC plugin console grants users administrative access
A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC VMWare Remote Console functions that may not be appropriate for users of CloudForms and thus this account. An attacker could use this vulnerability t...
PT-2018-5381 · Red Hat · Cloudforms
Name of the Vulnerable Software and Affected Versions: CloudForms affected versions not specified Description: A flaw was found in the CloudForms account configuration when using VMware, where a shared account with privileged access to VMRC functions is used by default. This could allow an attack...
SAP BILaunchPad and Central Management Console Denial of Service Vulnerability
SAP BI Launchpad is the gateway to BO4.0, BO4.0 SAP BusinessObjects a German company SAP SAP provides a wide range of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. A denial of service...
USN-3583-1: Linux kernel vulnerabilities
It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System f2fs in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-0750 It...
CVE-2018-0015
A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and execute system commands with root privilege. The AppFormix Agent exposes the debug console on a host where AppFormix Agent is executing. If the host is...
CVE-2018-0015
CVE-2018-0015 affects Juniper AppFormix: the AppFormix Agent exposes a Python debug console on the host where the agent runs, allowing a user with unrestricted access to execute commands with root privileges. Affected releases include all versions up to 2.7.3, and 2.11 before 2.11.3, and 2.15 bef...
Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - Lenovo Support US
No description provided...
Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - US
Lenovo Security Advisory: LEN-16095 Potential Impact: An attacker could gain access to the switch management interface, permitting settings changes that could result in exposing traffic passing through the switch, subtle malfunctions in the attached infrastructure, and partial or complete denial ...
How to Reset nsroot Password on NetScaler Console
Citrix ADM, formerly NetScaler Console This article describes how to reset nsroot password on NetScaler MAS. Note: For NetScaler Console Agents, you can replace the path with dev/da0s1a /flash 1. mount dev/da0s1a /flash 2. No /etc/passwd...
The vulnerability in the Kaspersky Security Center 10 web console allows a malicious individual to gain access to the software’s functions and execute arbitrary JavaScript code on the client side.
The vulnerability in Kaspersky Security Center 10 exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability can allow a malicious actor to gain access to software functions and execute arbitrary JavaScript code on the client side using a specially...