470 matches found
TMS 安全漏洞
TMS is a channel-based team communication and collaboration + lightweight task dashboard by weicheng individual developers. A security vulnerability exists in TMS v2.28.0, which originates from an insecure privilege in the component /TMS/admin/user/Update2. The vulnerability can be exploited to...
CVE-2022-26247: Incorrect Permission Assignment for Critical Resource
TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password...
CVE-2022-26246: Improper Neutralization of Input During Web Page Generation
TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...
CVE-2021-34760
Cisco TelePresence Management Suite (TMS) stores XSS in the web-based management interface due to insufficient input validation in a data field. An authenticated, remote attacker could inject script to run in a user’s browser or access browser data. Multiple sources (CVE-2021-34760 listings, Cisc...
CVE-2021-34760: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the...
TMS has a logic flaw vulnerability
TMS is a responsive web open source team collaboration system based on the channel model of team communication and collaboration + lightweight task Kanban. A logic flaw vulnerability exists in TMS, which can be exploited by attackers to modify other users' information...
Arbitrary File Download Vulnerability in Viwit Information TMS System
Vantage Information is a company that provides customers with a comprehensive logistics hybrid cloud solution that integrates intelligence and mobile connectivity and supports microservices architecture. An arbitrary file download vulnerability exists in Viwit's TMS system, which can be exploited...
Cross site scripting
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient input validati...
Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability
A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...
JVN#14776551: Multiple vulnerabilities in WordPress Plugin "wpDataTables Lite"
WordPress Plugin "wpDataTables Lite" provided by TMS-Plugins contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2019-6011 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N|...
tms-hamamatsu.co.jp Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-968053 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting tms-hamamatsu.co.jp website a...
CVE-2019-1661
CVE-2019-1661 affects Cisco TelePresence Management Suite (TMS) web-based management interface. The vulnerability is an unauthenticated XSS caused by insufficient validation of user-supplied input, exploitable when a user clicks a malicious link, allowing arbitrary script execution in the interfa...
CVE-2019-1661 Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is d...
CVE-2019-1660
Cisco TelePresence Management Suite (TMS) SOAP vulnerability (CVE-2019-1660) allows unauthenticated remote access to affected devices due to insufficient access controls on the SOAP interface. The issue enables an attacker on internal trusted networks to send crafted SOAP requests and gain access...
CVE-2019-1660: Improper Access Control
A vulnerability in the Simple Object Access Protocol SOAP of Cisco TelePresence Management Suite TMS software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to a lack of proper access and authentication controls on the...
CVE-2018-15467
Cisco TelePresence Management Suite (TMS) web-based management interface is vulnerable to cross-site scripting (XSS) due to insufficient input validation. An unauthenticated, remote attacker can lure a user to click a crafted link, enabling execution of arbitrary script code in the interface cont...
Moderate: Red Hat Security Advisory: Red Hat Certificate System 8 security, bug fix, and enhancement update
An update is now available for Red Hat Certificate System 8 with Advanced Access. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2017-7307
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...
