Input validation

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

CVE-2019-12475

CVE-2019-12475 affects MicroStrategy Web prior to 10.4.6, with a stored XSS in the metric caused by insufficient input validation. The vulnerability is described as a cross-site scripting issue that could occur in authenticated contexts, with CVSS v3.0 base score 6.1 (NETWORK, LOW ATTACKER PRS, U...

CVE-2019-12475: Improper Neutralization of Input During Web Page Generation

In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation...

The 'Veeam VMware: Datastore Unknown Files Analysis' Monitor Triggers Excessive Alerts

Challenge Situations customers may face that this article covers: The Veeam VMware: Datastore Unknown Files Analysis monitor triggers excessive alerts. The Veeam VMware: Datastore Unknown Files Analysis monitor and the Scan Datastore for Unknown Files Task show different results. The UnknownFiles...

IBM License Metric Tool and IBM BigFix Inventory Information Disclosure Vulnerability

IBM License Metric Tool and IBM BigFix Inventory are both products of IBM Corporation of the U.S. IBM License Metric Tool is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing requirements. IBM...

Citrix ADC GSLB MEP vs Monitors

What is a GSLB Service? A GSLB service is usually a representation of a load balancing or content switching virtual server, although it can represent any type of virtual server or 3rd party load balancer. The GSLB service identifies the service’s IP address, port number, and service type, and...

Centreon Remote Code Execution Vulnerability (CNVD-2018-14217)

Centreon and Centreon Web are both products of the French company Centreon.Centreon formerly Merethis Centreon is a suite of open-source IT monitoring software that is required to be used with Nagios, which it manages via the web, as well as third-party components for monitoring networks, operati...

CVE-2018-11587

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

Remote code execution

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

CVE-2018-11587

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

CVE-2018-11587

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

CVE-2018-11587

CVE-2018-11587 describes remote code execution in Centreon 3.4.6/Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.根据公开资料，影响组件为 Centreon/Centreon Web，漏洞根本原因是对 Virtual Metric 表单中 RPN 值的处理不安全，导致攻击者网络可远程执行代码，影响程度为高/关键。建议升级到包含修复的版本（如 Centreon Web 2.8.24，相关发布 ...

CVE-2018-11587

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

PT-2018-10686

Name of the Vulnerable Software and Affected Versions Centreon version 3.4.6 Centreon Web version 2.8.23 Description The issue concerns Remote Code Execution via the RPN value in the Virtual Metric form. This is specifically related to the centreonGraph.class.php file. Recommendations For Centreo...

CVE-2018-11587: Improper Control of Generation of Code

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php...

Major update for Wallarm UI

We’ve just released a couple of features we’re really excited about Live Threat Verification results The Active Threat Verification component was always a unique feature of Wallarm. Having the ability to replay the attack/payload against the application or its staging environment gives our...

Multiple IBM products strongly certified to bypass vulnerabilities

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

Nine Years of Better Broadband

One of the questions I am frequently asked about the State of the Internet is how things are changing - what are the trends we see in the data? As we've just closed out the ninth year of publication of the Connectivity report, I thought that it would be a good time to take look back and see just...

IBM BigFix Inventory and License Metric Tool Information Disclosure Vulnerability

IBM BigFix Inventory and License Metric Tool are both products of IBM USA. The former is a set of software for endpoint security review and mitigation applied to information security management, and the latter is a set of free tools applied to IT service management used to help determine processo...