CVE-2018-18882

A stored cross-site scripting XSS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2019-08577)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

CVE-2018-1983

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1541...

The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

The vulnerability of the WEB interface of the microprogramming software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

The vulnerability of the web interface of the microprogramming software for Pelco cameras, models Sarix Enhanced and Spectra Enhanced, allows a intruder to execute any JavaScript code in the user’s browser.

The vulnerability of the web interfaces of Pelco Sarix Enhanced and Spectra Enhanced microprogramming systems lies in the insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2019-06160)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

Cisco HyperFlex Cross-Site Scripting Vulnerability

Cisco HyperFlex Software is the United States Cisco Cisco company's set of scalable distributed file system. The system provides unified computing, storage and networking through cloud management, and provides enterprise-class data management and optimization services. A cross-site scripting...

The vulnerability in the web interface of the Cisco Prime Infrastructure software management tool allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability in the web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web pag...

Vulnerabilities in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allow attackers to execute cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the web interface of Microprogramming Software Routers Cisco Small Business RV320 and Cisco Small Business RV325 allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the web interfaces of Cisco Small Business RV320 and Cisco Small Business RV325 routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges using a specially crafted HTTP...

CVE-2019-1658

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15459

A vulnerability in the administrative web interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain additional privileges on an affected device. The vulnerability is due to improper controls on certain pages in the web interface. An attacker could explo...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

The vulnerability of the web interface of the Cisco Prime Collaboration Assurance software, a unified communication management tool, allows a perpetrator to perform arbitrary actions on the vulnerable system by manipulating requests across sites.

The vulnerability of the Cisco Prime Collaboration Assurance software interface relates to insufficient authentication of HTTP requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable system by manipulating the requests between sites...

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

The vulnerability in the web interface of the Cisco Energy Management Suite, related to incorrect restrictions on XML references to external objects (XXE), allows an attacker to disclose or modify sensitive information.

The vulnerability in the web interface of the Cisco Energy Management Suite relates to incorrect restrictions on XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to disclose or modify sensitive information...

The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows a perpetrator to cause service interruptions or expose sensitive information.

The vulnerability of the web interface of the microprogramming software for Cisco Adaptive Security Appliances and Configure Firepower Threat Defense is related to insufficient checking of HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose...

The vulnerability in the web interface of the microprogramming software for Cisco Wireless LAN Controllers of the 5500 series allows a intruder to disclose protected information.

The vulnerability of the web interface of microprogramming software for Cisco Wireless LAN Controllers of the 5500 series arises from insufficient checking of entered URI addresses. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially craft...