PT-2020-22896

Уязвимость программного обеспечения для входа в систему GUI fly-qdm связана с автоматическим отображением имени пользователя. Эксплуатация уязвимости позволяет нарушителю доступ к конфиденциальным данным...

CVE-2020-3164 Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance ESA, Cisco Web Security Appliance WSA, and Cisco Content Security Management Appliance SMA could allow an unauthenticated remote attacker to cause high CPU usage on an affected device,...

Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance ESA, Cisco Web Security Appliance WSA, and Cisco Content Security Management Appliance SMA could allow an unauthenticated remote attacker to cause high CPU usage on an affected device,...

CVE-2020-4197

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908...

CVE-2020-4198

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909...

CVE-2020-4198

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909...

CVE-2020-4198

CVE-2020-4198 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.x, specifically the Relationship admin page. Root cause: cross-site scripting in the Web GUI could allow an attacker to inject JavaScript, potentially leading to credential disclosure within a trusted session. Remediation: apply the Fix Pac...

CVE-2020-4197

Summary: CVE-2020-4197 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.x and concerns cacheable or locally storable web content that can be read by another user on the same system. The issue is associated with WebGUI pages that may be cached and viewed by others, as described by IBM’s Security Bulleti...

CVE-2020-4196

CVE-2020-4196 affects IBM Tivoli Netcool/OMNIbus_GUI in IBM Operations Analytics Predictive Insights (WebGUI) 8.1.x. The vulnerability is a cross‑site scripting (XSS) flaw on the Tool Prompt Configuration page, enabling an attacker to inject arbitrary JavaScript into the Web UI and potentially di...

PT-2020-17913

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2020-17911

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session du...

PT-2020-17912

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM Tivoli Netcool/OMNIbus GUI version 8.1.0, consider...

CVE-2014-4981

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...

Input validation

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...

CVE-2014-4981

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...

CVE-2014-4981

CVE-2014-4981 affects LPAR2RRD prior to 3.5 (and up to 3.5) and related versions where insufficient input sanitization of web GUI parameters allows remote attackers to execute arbitrary commands. The underlying issue is input validation that enables arbitrary command injection on the LPAR2RRD ser...

PT-2020-7691

Name of the Vulnerable Software and Affected Versions LPAR2RRD versions 3.5 and earlier Description The issue allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters. Recommendations For LPAR2RRD versions 3.5 and earlier, at the momen...

CVE-2014-4981: Improper Neutralization of Special Elements used in an OS Command

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters...

[SECURITY] Fedora 31 Update: cutter-re-1.10.1-3.fc31

Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

[SECURITY] Fedora 30 Update: cutter-re-1.10.1-3.fc30

Cutter is a Qt and C++ GUI for radare2. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...