Cross site scripting

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

CVE-2017-15360

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...

CVE-2017-15360

CVE-2017-15360 affects PRTG Network Monitor version 17.3.33.2830, where stored Cross-Site Scripting is possible in all created group names due to incorrect HTML-encoded script error handling. The connected documents confirm the vulnerability description but do not provide concrete remediation det...

x86: Incorrect handling of self-linear shadow mappings with translated guests

ISSUE DESCRIPTION The shadow pagetable code uses linear mappings to inspect and modify the shadow pagetables. A linear mapping which points back to itself is known as self-linear. For translated guests, the shadow linear mappings being in a separate address space are not intended to be self-linea...

Long Infrastructure Object Removal

Challenge Sometimes when you remove an infrastructure object vCenter or Hyper-V server from the Veeam ONE Monitor client, the removal process may take longer than expected. Cause Once you click the Remove server button from the infrastructure tree view, it could take some time to remove the data...

PRTG Network Monitor Cross-Site Scripting Vulnerability (CNVD-2017-32970)

PRTG Network Monitor is a network monitoring program. PRTG Network Monitor suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...

PRTG Network Monitor Stored Cross-Site Scripting Vulnerability

PRTG Network Monitor is a network monitoring program. PRTG Network Monitor suffers from a stored cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions wh...

Nzyme - Collects 802.11 Management Frames And Sends Them To A Graylog Setup For Wifi Ids, Monitoring, And Incident Response

Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog Open Source log management setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode. Think about this like a long-term months or years...

Design/Logic Flaw

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path...

Wireless Monitoring, Intrusion Detection & Forensics: Nzyme

Nzyme collects 802.11 management frames directly from the air and sends them to a Graylog Open Source log management setup for WiFi IDS, monitoring, and incident response. It only needs a JVM and a WiFi adapter that supports monitor mode. Think about this like a long-term months or years...

CVE-2017-15009

PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm the error page, via the errormsg parameter...

CVE-2017-15008

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element...

CVE-2017-15008

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element...

CVE-2017-15009

PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm the error page, via the errormsg parameter...

Cross site scripting

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element...

Cross site scripting

PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm the error page, via the errormsg parameter...

CVE-2017-15009

PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm the error page, via the errormsg parameter...

CVE-2017-15008

CVE-2017-15008 affects PRTG Network Monitor version 17.3.33.2830. The issue is a stored Cross-Site Scripting vulnerability in sensor titles caused by incorrect error handling for a %00 in the SRC attribute of an IMG element. This could allow an attacker to inject script or HTML when malicious dat...

CVE-2017-15009

CVE-2017-15009 affects PRTG Network Monitor (v17.3.33.2830). The vulnerability is a reflected Cross‑Site Scripting flaw on the error page (error.htm) via the errormsg parameter. Documented CVSS values (NVD) indicate a network-facing issue with medium base severity (CVSS2: 4.3; CVSS3: 6.1) and use...

CVE-2017-15008

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element...