PT-2024-13796 · Unknown · Purity//Fb

Name of the Vulnerable Software and Affected Versions: Purity//FB affected versions not specified Description: A flaw in the authentication mechanism allows a local account to access the management interface using an unintended method, potentially granting an attacker privileged access to the...

PT-2024-18660 · Cisco · Cisco Expressway Series

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This issue is due to improp...

PT-2024-18642 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to upload arbitrary files to an affected device. The attacker...

Denial Of Service (DoS)

org.wildfly: wildfly-domain-http is vulnerable to Denial Of Service DoS. The vulnerability is caused by a lack of sockets limits within the management interface, which can result in Denial Of Service DoS due to hitting the nofile limit. An attacker can exploit this by overwhelming the system with...

How to Replace a Network Interface Card in a XenServer Host

This article describes the procedure to replace a Network Interface Card NIC in a XenServer Host. For example, the procedure can be used to replace a faulty NIC. Requirements The XenServer host must be standalone and not joined to a resource pool. Replacing the NIC used as management interface...

CVE-2024-37351

There is a cross-site scripting vulnerability in the management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator permissions can interfere with other system administrator’s use of the management UI when the second administrator later edits the same manageme...

CVE-2024-37344

There is a cross-site scripting vulnerability in the Policy management UI of Absolute Secure Access prior to version 13.06. Attackers with system administrator permissions can interfere with another system administrator’s use of the policy management UI when the administrators are editing the sam...

PT-2024-27495 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the management UI of Absolute Secure Access. Attackers with system administrator permissions can exploit this. Recommendations: For versions...

PT-2024-27494 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the policy management UI. Attackers can interfere with a system administrator's use of the policy management UI when the attacker convinces t...

PT-2024-27492 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: The issue is a cross-site scripting vulnerability in the management UI of Absolute Secure Access. Attackers with system administrator permissions can interfere with other system...

PT-2024-27491 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the management UI of Absolute Secure Access. Attackers with system administrator permissions can exploit this issue. Recommendations: For...

PT-2024-27490 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.06 Description: There is a cross-site scripting issue in the pool configuration component of the management UI. Attackers with system administrator permissions can pass a limited length script to be...

Cisco Finesse Web Management Interface Cross-Site Request Forgery Vulnerability

Cisco Finesse is the United States Cisco Cisco company's set of call center management software. A cross-site request forgery vulnerability exists in the Cisco Finesse web management interface, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to...

Cisco Finesse Web Management Interface Server-Side Request Forgery Vulnerability

Cisco Finesse is the United States Cisco Cisco company's set of call center management software. A server-side request forgery vulnerability exists in the Cisco Finesse web management interface, which can be exploited by a remote attacker to submit a special request that can obtain sensitive...

Netgear WNR614 安全漏洞

The NETGEAR WNR614 is an N300 wireless router with external antenna from Netgear USA. The NETGEAR WNR614 suffers from an information disclosure vulnerability that originates from allowing an attacker to bypass authentication and access the management interface via an unspecified vector. No detail...

Cisco Finesse Web-Based Management Interface Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to perform a stored cross site-scripting XSS attack by exploiting a remote file inclusion RFI vulnerability or perform a server-side request forgery SSRF attack an...

Cisco Finesse 安全漏洞

Cisco Finesse is the United States Cisco Cisco company's set of call center management software. A cross-site request forgery vulnerability exists in the Cisco Finesse web management interface, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotel...

Mercusys MW325R 安全漏洞

The Mercusys MW325R is an enhanced wireless router from Mercusys of China. A security vulnerability exists in the Mercusys MW325R V31.11.0 221019 version, which stems from the fact that no authentication will be performed on data sent by the user, and a WAN attacker can make the management...

Cisco Secure Web Appliance XSS (cisco-sa-esa-sma-wsa-xss-bgG5WHOD)

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker...