CVE-2019-17379

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

CVE-2019-17379

CVE-2019-17379 affects cPanel before 82.0.15, introducing a self-stored XSS in the WHM SSL Storage Manager interface. The underlying issue is lack of proper validation of client-side data in the web application, enabling an attacker to inject and execute script through stored input. Impact per so...

PT-2019-15117

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.15 Description The issue allows for self-stored XSS in the WHM SSL Storage Manager interface. Recommendations For versions prior to 82.0.15, update to version 82.0.15 or later to resolve the issue...

CVE-2019-17379: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

IBM Spectrum Protect 7.1.x < 7.1.9.300 / 8.1.x < 8.1.8 Multiple Vulnerabilities

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.x 7.1.9.300 or 8.1.x 8.1.8. It is, therefore, affected by multiple IBM Db2 remote code execution and privilege escalation vulnerabilities. These vulnerabilities could allow an attacker to...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

CVE-2019-4140

CVE-2019-4140 affects IBM Spectrum Protect Server (formerly IBM Tivoli Storage Manager) 7.1 and 8.1. The issue allows a local user to replace existing databases by restoring old data, potentially overwriting databases. Affected versions: 8.1.0.0–8.1.7.x and 7.1.0.0–7.1.9.200. Remediation: upgrade...

Security Bulletin: Stack-based buffer overflow and elevation of privileges vulnerabilities in IBM Spectrum Protect Server and Storage Agents (CVE-2019-4087, CVE-2019-4088)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server and Storage Agents are vulnerable to a stack-based buffer overflow and elevation of privileges. Vulnerability Details CVEID: CVE-2019-4087 DESCRIPTION: IBM Spectrum Protect Servers and Storage Agents are vulnerable to a...

CVE-2019-4140: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

Security Bulletin: Password disclosure in IBM Spectrum Protect Server (CVE-2019-4140)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server may disclose the database restore password when using the dsmserv restore db command. This could allow another user to perform a database restore or possibly result in an old backup replacing the database. Vulnerability Detai...

Security Bulletin: Cross-site scripting and privilege escalation vulnerabilities in WebSphere Application Server Liberty affect IBM Spectrum Protect Operations Center (CVE-2018-1767, CVE-2018-1901)

Summary IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting and escalation of privileges which can affect IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center. Vulnerability Details CVEID: CVE-2018-1767 DESCRIPTION: IBM WebSphere Application Server...

The vulnerability in the web interface of the Accelerated Storage Manager driver for the Rapid Storage Technology Enterprise storage technology implementation allows a perpetrator to cause a service failure.

The vulnerability in the web interface of the Accelerated Storage Manager driver for the Rapid Storage Technology Enterprise data storage technology exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability can allow a malicious actor to cause servi...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

Cross site scripting

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0130

Intel Rapid Storage Technology Enterprise (RSTe) includes the Intel Accelerated Storage Manager component. CVE-2019-0130 describes a reflected XSS in the web interface of this manager prior to version 5.5.0.2015, which may allow an unauthenticated attacker to potentially cause a denial of service...

CVE-2019-0130: Improper Neutralization of Input During Web Page Generation

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise Advisory

Summary: Potential security vulnerabilities in Intel® Accelerated Storage Manager in Intel® Rapid Storage Technology Enterprise RSTe may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEI...

Intel® Accelerated Storage Manager in RSTe Advisory

Summary: A potential security vulnerability in Intel® Accelerated Storage Manager in RSTe may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0135 Description: Improper permissions in the installer...