12873 matches found
Product update: Virtuozzo Infrastructure Platform 2.5 Update 8 (2.5.0-1680)
This update enables upgrade to the new major version 3.0 and provides important system fixes. Vulnerability id: VSTOR-23308 Journald could get stuck, waiting endlessly for "--verify" to complete and stalling services in an unresponsive state. Vulnerability id: VSTOR-23898 Under certain...
Reference: TaoSecurity News
I started speaking publicly about digital security in 2000. I used to provide this information on my Web site, but since I don't keep that page up-to-date anymore, I decided to publish it here. 2017 Mr. Bejtlich led a podcast titled Threat Hunting: Past, Present, and Future, in early July 2017. H...
CVE-2019-13068
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
Design/Logic Flaw
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
CVE-2019-13068
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
PT-2019-13106 · Grafana +1 · Grafana +1
Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 6.2.5 Description: The issue allows HTML Injection in panel drilldown links via the Title or url field. This is related to the public/app/features/panel/panel ctrl.ts file in Grafana. Recommendations: For versions...
CVE-2019-13068
public/app/features/panel/panelctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links via the Title or url field...
Magento Cross-Site Scripting Vulnerability (CNVD-2019-26215)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento Open Source versions prior to 1.9.4.2 a...
Magento cross-site scripting vulnerability (CNVD-2019-26240)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento versions 2.1.18 before 2.1, 2.2.9 befor...
Magento cross-site scripting vulnerability (CNVD-2019-26221)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento Open Source versions prior to 1.9.4.2 a...
Magento cross-site scripting vulnerability (CNVD-2019-26239)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in the admin panel in Magento Open Source versions prior to 1.9.4.2...
CVE-2019-7225
The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. These credentials allow the provisioning tool "Panel Builder 600" to flash a new interface and Tags MODBUS coils mapping to the HMI. These credentials are the idal123...
ABB PB610 Panel Builder 600
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low skill level to exploit Vendor: ABB Equipment: PB610 Panel Builder 600 Vulnerabilities: Use of Hard-coded Credentials, Improper Authentication, Relative Path Traversal, Improper Input Validation, Stack-based Buffer Overflow 2. RISK EVALUATION An...
Quadbase Systems EspressReport ES Cross-Site Request Forgery Vulnerability
Quadbase Systems EspressReport ES ERES is a centralized business intelligence reporting solution from Quadbase Systems, USA. A cross-site request forgery vulnerability in the admin panel in Quadbase Systems ERES v7.0 update 7 can be exploited by an attacker to send an unintended request to the...
ABB PB610 IDAL HTTP server memory corruption vulnerability
ABB PB610 is a software from ABB Switzerland that designs graphical user interfaces for the CP600 control panel platform. the IDAL HTTP server is one of the HTTP Hypertext Transfer Protocol servers. A memory corruption vulnerability exists in the IDAL HTTP server in the ABB PB610, which arises fr...
PRODSECBUG-2188: Stored cross-site scripting in the admin panel
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23...
PRODSECBUG-2316: Stored cross-site scripting in the admin panel
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23...
PRODSECBUG-2193: Stored cross-site scripting in the admin panel
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23...