Lucene search
+L

2538 matches found

CNVD
CNVD
added 2021/03/25 12:00 a.m.38 views

HPE Network Orchestrator SQL Injection Vulnerability

HPE Network Orchestrator uses the HPE family of storage devices to organize and monitor end-to-end, multi-protocol mesh architectures, improving their uptime, resilience and predictability. A SQL injection vulnerability exists in HPE Network Orchestrator versions prior to 2.5. The vulnerability...

7.5CVSS7.4AI score0.01029EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/22 6:15 p.m.11 views

CVE-2021-26578

A potential security vulnerability has been identified in HPE Network Orchestrator NetO versions: Prior to 2.5. The vulnerability could be remotely exploited with SQL injection...

7.5CVSS7AI score0.01029EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/22 6:15 p.m.25 views

CVE-2021-26578

A potential security vulnerability has been identified in HPE Network Orchestrator NetO versions: Prior to 2.5. The vulnerability could be remotely exploited with SQL injection...

7.5CVSS0.01029EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/22 6:15 p.m.15 views

Sql injection

A potential security vulnerability has been identified in HPE Network Orchestrator NetO versions: Prior to 2.5. The vulnerability could be remotely exploited with SQL injection...

5CVSS7.8AI score0.01029EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/22 5:02 p.m.43 views

CVE-2021-26578

A potential security vulnerability has been identified in HPE Network Orchestrator NetO versions: Prior to 2.5. The vulnerability could be remotely exploited with SQL injection...

8.1AI score0.01029EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/22 12:00 a.m.8 views

HPE Orchestrator SQL注入漏洞

HPE Network Orchestrator uses the HPE family of storage devices to organize and monitor end-to-end, multi-protocol mesh architectures, improving their uptime, resilience and predictability. A SQL injection vulnerability exists in HPE Network Orchestrator versions prior to 2.5. The vulnerability...

7.5CVSS5.9AI score0.01029EPSS
SaveExploits0References2
Veeam
Veeam
added 2021/03/18 12:00 a.m.14 views

Release Information for Veeam Disaster Recovery Orchestrator v4

Veeam Disaster Recovery Orchestrator 4.0 is superseded by Veeam Disaster Recovery Orchestrator 5.0. Requirements Please confirm that you are running version 3.0 build 3.0.0.1770 or later prior to upgrading. You can check this in the VAO UI | Administration tab | About. After upgrading, your build...

6.6AI score
SaveExploits0Affected Software1
HPE Security Bulletins
HPE Security Bulletins
added 2021/03/16 12:00 a.m.9 views

HPESBGN04097 rev.1 - Hewlett Packard Enterprise Network Orchestrator (NetO), Remote SQL Injection Vulnerability

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Orchestrator -Prior to Version 2.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26578 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5...

7.5CVSS7AI score0.01029EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.12 views

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS5.5AI score0.01629EPSS
SaveExploits0References2Affected Software1
Lenovo
Lenovo
added 2021/03/09 1:13 p.m.34 views

Lenovo XClarity Orchestrator (LXCO) Information Disclosure Vulnerabilities - Lenovo Support US

No description provided...

4.9CVSS5AI score0.00542EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/03/09 12:00 a.m.8 views

Lenovo XClarity Orchestrator 安全漏洞

Lenovo XClarity Orchestrator is an application from the Chinese company Lenovo. It provides centralized monitoring, management, and analysis for environments containing a large number of devices. A security vulnerability exists in LXCO prior to version 1.2.2, which stems from the fact that if the...

4.9CVSS5.4AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/09 12:00 a.m.10 views

联想 Lenovo XClarity Orchestrator 安全漏洞

Lenovo XClarity Orchestrator is an application from the Chinese company Lenovo. It provides centralized monitoring, management, and analysis for environments containing a large number of devices. A security vulnerability exists in LXCO prior to version 1.2.2, which stems from an optional password...

4.9CVSS5.3AI score0.00542EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/03 10:15 p.m.14 views

CVE-2021-27940

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

6.1CVSS0.01245EPSS
SaveExploits1References3
OSV
OSV
added 2021/03/03 10:15 p.m.26 views

CVE-2021-27940

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

6.1CVSS5.8AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/03 10:15 p.m.4 views

CVE-2021-27940

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

6.1CVSS6AI score0.01245EPSS
SaveExploits1References4
Prion
Prion
added 2021/03/03 10:15 p.m.19 views

Cross site scripting

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

4.3CVSS5.9AI score0.01245EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/03/03 10:00 p.m.22 views

CVE-2021-27940

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

6.1AI score0.01245EPSS
SaveExploits1References3
CVE
CVE
added 2021/03/03 10:00 p.m.65 views

CVE-2021-27940

OpenArk Orchestrator before version 3.2.4 is vulnerable to cross‑site scripting via the orchestrator-msg parameter in resources/public/js/orchestrator.js. The issue is documented across multiple sources (including CVE-2021-27940 and Red Hat/GHSA entries) and is addressed by upgrading to version 3...

6.1CVSS5.9AI score0.01245EPSS
SaveExploits1References3Affected Software1
Cisco
Cisco
added 2021/03/03 4:00 p.m.51 views

Cisco Network Services Orchestrator Path Traversal Vulnerability

A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web-management interface and certain HTTP-based APIs do not properly...

5.3CVSS5.3AI score0.01629EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/03 12:00 a.m.11 views

openark orchestrator 跨站脚本漏洞

Shlomi Noach orchestrator is Shlomi Noach an open source application . Provides MySQL high availability and replication management tools , can be run as a service , and provides command line access , HTTP API and Web interface . A cross-site scripting vulnerability exists in openark orchestrator...

6.1CVSS5.9AI score0.01245EPSS
SaveExploits1References4
Rows per page
Query Builder