2775 matches found
IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞
IBM Tivoli Netcool/OMNIbus is a service-level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats in...
CVE-2021-30116
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...
CVE-2021-29804
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...
Emissary Server-Side Request Forgery Vulnerability
Emissary is a P2P-based, data-driven workflow engine. Emissary suffers from a server-side request forgery vulnerability that can be exploited by an attacker to cause a credential disclosure...
Emissary 代码问题漏洞
Emissary is a P2P-based, data-driven workflow engine. Emissary suffers from a server-side request forgery vulnerability that can be exploited by an attacker to cause a credential disclosure...
CVE-2020-4935
IBM Datacap Fastdoc Capture IBM Datacap Navigator 9.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2020-4935
IBM Datacap Fastdoc Capture IBM Datacap Navigator 9.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Cross site scripting
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949...
CVE-2021-29775
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
CVE-2021-20477
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949...
IBM Security Verify 跨站脚本漏洞
IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. A cross-site scripting vulnerability exists ...
CVE-2021-29775
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...
CVE-2020-5000
IBM Financial Transaction Manager is affected by CVE-2020-5000, a cross-site scripting vulnerability impacting versions 3.2.0 through 3.2.8. The Web UI can be abused to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. IBM’s bulletin/version fix ...
CVE-2021-34679
Thycotic Password Reset Server before 5.3.0 allows credential disclosure...
CVE-2021-34679
Thycotic Password Reset Server before 5.3.0 allows credential disclosure...
CVE-2021-34679
Thycotic Password Reset Server before 5.3.0 allows credential disclosure...
Design/Logic Flaw
Thycotic Password Reset Server before 5.3.0 allows credential disclosure...
CVE-2021-34679
Thycotic Password Reset Server before 5.3.0 allows credential disclosure...
CVE-2021-34679
CVE-2021-34679 affects Thycotic Password Reset Server prior to version 5.3.0, where the password reset flow can disclose credentials. The vulnerability is documented across multiple sources (NVD, CNVD, Red Hat and others) and is described as an information disclosure vulnerability in versions bef...
D-Link DIR-868L Information Disclosure Vulnerability
The D-Link DIR-868L is a wireless AC1750 dual-band Gigabit cloud router. A credential disclosure vulnerability exists in the D-Link DIR-868L version 3.01. An attacker can exploit this vulnerability by decompiling the firmware to access the firmware and extract sensitive data...