PT-2019-19182 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A denial of service issue exists due to inadequate input validation, allowing attackers to cause a denial of service. Recommendations: At the moment, there is no information about a...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

Security Bulletin: IBM MQ Console has inadequate input validation (CVE-2018-1836)

Summary The IBM MQ console has inadequate input validation in one of its forms that could allow an attacker to inject unintended data into fields. Vulnerability Details CVEID: CVE-2018-1836 DESCRIPTION: IBM MQ Console is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

Beck GmbH IPC@Chip does not adequately validate user input thereby disclosing sensitive network data via crafted URL

Overview An insecure default configuration in the Beck IPC@CHIP allows an intruder to obtain priviledged system information. Description The Beck IPC@CHIP is a single chip embedded webserver. The Beck IPC@CHIP ships with a cgi script named "ChipCfg". Using a specially crafted url, an attacker can...