CVE-2019-10715

There is Stored XSS in Verodin Director 3.5.3.0 and earlier via input fields of certain tooltips, and on the Tags, Sequences, and Actors pages...

Cross site scripting

There is Stored XSS in Verodin Director 3.5.3.0 and earlier via input fields of certain tooltips, and on the Tags, Sequences, and Actors pages...

Information disclosure

An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated security technologies via a /integrations.json JSON REST API request...

Verodin Cross-Site Scripting Vulnerability

Verodin is a suite of network security inspection platforms from Verodin, Inc. in the United States. The platform is primarily used to test the effectiveness of security protections for networks, endpoints, email, and cloud controls.Director is Verodin's console program. A cross-site scripting...

Verodin Information Disclosure Vulnerability

Verodin is a suite of network security inspection platforms from Verodin, Inc. in the United States. The platform is primarily used to test the effectiveness of security protections for networks, endpoints, email, and cloud controls.Director is Verodin's console program. An information disclosure...

CVE-2019-10716

An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated security technologies via a /integrations.json JSON REST API request...

CVE-2019-10716

CVE-2019-10716 affects Verodin Director 3.5.3.1 and earlier. The vulnerability is an information-disclosure flaw where the REST API endpoint /integrations.json can reveal usernames and passwords of integrated security tools (e.g., Splunk, ArcSight, Palo Alto, AWS Cloud Trail) to authenticated use...

CVE-2019-10715

There is Stored XSS in Verodin Director 3.5.3.0 and earlier via input fields of certain tooltips, and on the Tags, Sequences, and Actors pages...

CVE-2019-10715

CVE-2019-10715 affects Verodin Director; a Stored XSS exists in versions 3.5.3.0 and earlier via input fields in tooltips and on the Tags, Sequences, and Actors pages. Root cause cited by CNVD/Red Hat references is lack of proper validation of client-side data by the web application. Impact detai...

CloudBees Jenkins vFabric Application Director plugin security vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . vFabric Application Director Plugin is used i...

Citrix Director showing the client IP address as 0.0.0.0 for users connecting from HTML5 receiver.

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Please consider below scenario: The user connects to a Published desktop or to a Published application v...

CVE-2019-10419

Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10419

Jenkins vFabric Application Director Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10419

CVE-2019-10419 affects Jenkins via the vFabric Application Director Plugin, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins controller. The underlying issue is unencrypted credential storage in the Application Director Plugin’s configuration file ...

PT-2019-11813 · Vmware +2 · Vfabric Application Director Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins vFabric Application Director Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file of the Jenkins master. Specifically, the...

Cisco UCS Director Authentication Bypass (cisco-sa-20190821-imcs-ucs-cmdinj)

According to its self-reported version, the remote host is running a version of Cisco UCS Director that is affected by a command execution vulnerability. An authenticated, remote attacker can exploit this to execute arbitrary commands as a root user. C Tenable Network Security, Inc...

The vulnerability of the plug-and-play software package Cisco Industrial Network Director allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Industrial Network Director plug-and-play software package is related to errors in access control for the web-based management interface. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability affects the Cisco Integrated Management Controller (IMC) Supervisor web interface, as well as tools for managing physical infrastructure and virtual environments from Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to execute arbitrary commands.

The vulnerability of the Cisco Integrated Management Controller IMC Supervisor web interface, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to insufficient validation of input...

Cisco IMC Supervisor and Cisco UCS Director Command Injection (CVE-2019-1936)

A command injection vulnerability exists in Cisco IMC Supervisor and Cisco UCS Director. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands in the affected system...

Cisco UCS Director Web Interface Authentication Bypass (CVE-2019-1937)

An authentication bypass vulnerability exists in Cisco UCS Director web interface. Successful exploitation of this vulnerability could allow a remote attacker to bypass login authentication and gain unauthorized access to the vulnerable system...