CVE-2021-1350 Cisco Umbrella Dashboard Packet Flood Vulnerability

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted...

CVE-2021-1350 Cisco Umbrella Dashboard Packet Flood Vulnerability

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted...

CVE-2021-1350

CVE-2021-1350 affects the Cisco Umbrella Dashboard web UI. The issue stems from insufficient rate limiting in the web UI, which could allow an unauthenticated, remote attacker to degrade service performance by sending crafted HTTPS packets at a high, sustained rate. Cisco has issued an advisory a...

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

Cross site scripting

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Employees, First Name and Last Name fields...

Cross site scripting

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

CVE-2021-1350

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted...

Cisco Umbrella Dashboard Packet Flood Vulnerability

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted...

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

CVE-2020-35272

The CVE-2020-35272 entry concerns the “Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0.” Multiple connected documents confirm a cross-site scripting (XSS) vulnerability in the Admin Portal, specifically in the Task and Description fields. The available sources do not spe...

CVE-2020-35271

CVE-2020-35271 affects the Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Employees, First Name, and Last Name fields. Exploitation details are not provided in the connected documents, and no remediation or ...

Security Bulletin: A Session Timeout vulnerability affects IBM Rational Performance Tester

Summary IBM Rational Performance Tester contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. Vulnerability Details Third Party Entry: PSIRT-ADV0027326 DESCRIPTION: Created from Advisory: ADV0027326 CVSS Base score: 4.3 CVSS Vector:...

Security Bulletin: A Weak Authentication vulnerability affect IBM Rational Performance Tester

Summary IBM Rational Performance Tester uses basic authentication wihch is relatively weak. An attacker could potentially decode the encoded credentials. Vulnerability Details Third Party Entry: PSIRT-ADV0027320 DESCRIPTION: Created from Advisory: ADV0027320 CVSS Base score: 5.9 CVSS Vector:...

Google Chrome Access Control Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Performance API improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit the vulnerability to leak...

Cisco Umbrella Security Vulnerability

Cisco Umbrella is a suite of cloud security platforms from Cisco. The platform prevents cyber threats such as phishing, malware and ransomware. A security vulnerability exists in Cisco Umbrella's web UI that originated from allowing an unauthenticated remote attacker to negatively impact the...

CVE-2020-35272: Improper Neutralization of Input During Web Page Generation

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

Google Chrome Performance API Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Performance API improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit the vulnerability to leak...

EulerOS 2.0 SP3 : python-ipaddress (EulerOS-SA-2021-1115)

According to the version of the python-ipaddress package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow...

PT-2021-11743

Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Employees, First Name, and Last Name fields. This means that an attacker could potentially injec...

PT-2021-11744

Name of the Vulnerable Software and Affected Versions: Employee Performance Evaluation System in PHP/MySQLi with Source Code version 1.0 Description: The issue concerns cross-site scripting XSS in the Admin Portal, specifically in the Task and Description fields. This allows for potential malicio...