PT-2017-16150

Name of the Vulnerable Software and Affected Versions Cisco UCS Director version 6.00.0 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. Recommendations F...

PT-2017-16152

Name of the Vulnerable Software and Affected Versions Cisco Prime Optical for Service Providers version 10.60.1 Description A RADIUS Secret Disclosure issue in the web network management interface could allow an authenticated, remote attacker to disclose sensitive information in the configuration...

CVE-2017-3872: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

PT-2017-1541

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.52.14076.1 Cisco Unified Communications Manager versions prior to 12.00.98000.219 Description A cross-site scripting XSS filter bypass issue exists in the web-based management interface, allowing...

CVE-2017-3868: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Release...

GitHub Enterprise Remote Code Execution via Marshal

pEveryone uses GitHub. If you have huge amount of green paper or you are very paranoid about your code, you can run your own GitHub. For $2,500 USD per 10 user years you get GitHub Enterprise: A virtual machine containing a fully-featured GitHub instance. Despite a few edge cases that are handled...

Cisco UCS Director Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation ...

CVE-2017-5584

Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-5583

The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors...

Dell SonicWall Secure Remote Access Server Command Injection Vulnerability

Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the diagnostics CGI /cgi-bin/diagnostics component of the web management interface of the Dell SonicWall Secure...

Dell SonicWall Secure Remote Access Server Command Injection Vulnerability (CNVD-2017-02473)

Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the viewcert CGI /cgi-bin/viewcert component of the web management interface of Dell SonicWall Secure Remote Acces...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3829

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

PT-2017-16138

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System Device Manager IDM version 7.21V7 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments...

CVE-2017-3828: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

PT-2017-16127

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Switches version 12.00.98000.280 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user...

CVE-2017-3845: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: Cisco Prime...

CVE-2017-3829: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...