Lucene search
+L

2299 matches found

Citrix
Citrix
added 2018/11/26 12:0 a.m.10 views

Citrix Director error "403 Forbidden : access is denied"

When you try to access Director URL in the browser, there is an error displayed: Server Error - 403 - Forbidden: Access Denied...

7AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2018/11/20 12:44 p.m.41 views

The PCLOB Needs a Director

The US Privacy and Civil Liberties Oversight Board is looking for a director. Among other things, this board has some oversight role over the NSA. More precisely, it can examine what any executive-branch agency is doing about counterterrorism. So it can examine the program of TSA watchlists, NSA...

1.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/11/20 12:0 a.m.10 views

The vulnerability in the web interface of the Juniper Networks Junos Space Security Director arises from insufficient protection of the web page structure, allowing attackers to disclose sensitive information or perform actions on behalf of other users.

The vulnerability of the Juniper Networks Junos Space Security Director administrative interface arises due to insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform actions on behalf of other users...

10CVSS5.4AI score0.00862EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/11/13 7:29 p.m.8 views

CVE-2018-12416

The GridServer Broker and GridServer Director components of TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an unauthenticated user to perform cross-site request forgery CSRF. Affected releases are TIBCO Software Inc. TIBCO DataSynapse GridServer...

8.8CVSS5.7AI score0.00585EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2018/11/13 4:20 a.m.20 views

CVE-2018-16856

In a default Red Hat Openstack Platform Director installation, openstack-octavia creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure...

7.5CVSS2.3AI score0.00878EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/10 6:29 p.m.7 views

CVE-2018-0047

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

5.4CVSS5.7AI score0.00862EPSS
SaveExploits0References2
NVD
NVD
added 2018/10/10 6:29 p.m.19 views

CVE-2018-0047

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

8CVSS7.3AI score0.00862EPSS
SaveExploits0References2
Prion
Prion
added 2018/10/10 6:29 p.m.24 views

Cross site scripting

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

3.5CVSS5.1AI score0.00862EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/10/10 6:29 p.m.4 views

Junos Space Security Director: XSS vulnerability in web administration

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

8CVSS5.2AI score0.00862EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/10/10 6:0 p.m.28 views

CVE-2018-0047 Junos Space Security Director: XSS vulnerability in web administration

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

8CVSS5.9AI score0.00862EPSS
SaveExploits0References2
CVE
CVE
added 2018/10/10 6:0 p.m.62 views

CVE-2018-0047

CVE-2018-0047 describes a persistent cross-site scripting (XSS) vulnerability in the UI framework used by Juniper Networks Junos Space Security Director. A remote attacker with authentication can inject persistent scripts that may exfiltrate information or perform actions as another user when oth...

8CVSS5.9AI score0.00862EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2018/10/10 12:0 a.m.7 views

Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability

Cisco Industrial Network Director is an industrial automation management system from Cisco. The system automates the management of industrial Ethernet infrastructure by visualizing its operation. A cross-site request forgery vulnerability exists in the web-based management interface in Cisco...

8.8CVSS8.8AI score0.00566EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/09 12:0 a.m.5 views

Cisco UCS Director WEB Management Interface Cross-Site Scripting Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...

6.1CVSS6.2AI score0.012EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/09 12:0 a.m.8 views

Cisco Industrial Network Director DHCP Service Denial of Service Vulnerability

Cisco Industrial Network Director is a tool that helps IT and operations teams collaborate to fully understand network and automation devices. A security vulnerability in the Cisco Industrial Network Director DHCP service allows remote attackers to conduct denial-of-service attacks by submitting ...

4.3CVSS5AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
added 2018/10/05 2:29 p.m.24 views

CVE-2018-15406

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

6.1CVSS5.9AI score0.012EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/05 2:29 p.m.6 views

CVE-2018-15406

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

6.1CVSS6AI score0.012EPSS
SaveExploits0References2
NVD
NVD
added 2018/10/05 2:29 p.m.22 views

CVE-2018-15404

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient restrictions on the size or...

6.5CVSS6.5AI score0.01069EPSS
SaveExploits0References1
NVD
NVD
added 2018/10/05 2:29 p.m.25 views

CVE-2018-15405

A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly...

6.5CVSS6.4AI score0.01846EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/05 2:29 p.m.6 views

CVE-2018-15405

A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly...

6.5CVSS5.8AI score0.01846EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/05 2:29 p.m.2 views

CVE-2018-15392

A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of DHCP lease requests. An attacker could exploit this vulnerability by sending...

4.3CVSS5.8AI score0.0045EPSS
SaveExploits0References1
Rows per page
Query Builder