CVE-2021-38896

IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566...

Cisco Identity Services Engine File Download Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative read-only privileges to download files that should be restricted. This vulnerability is due to incorrect permissions settings on an affecte...

CVE-2021-40121

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an attacker to conduct a cross-site scripting XSS attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

CVE-2021-34760

A vulnerability in the web-based management interface of Cisco TelePresence Management Suite TMS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient input validation by the...

Cisco Integrated Management Controller 输入验证错误漏洞

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and rebooting servers. An input...

Cisco TelePresence Management Suite 跨站脚本漏洞

Cisco TelePresence Management Suite TMS is a set of video conferencing solutions management suite from the United States Cisco Cisco. The product is primarily used to deploy large-scale remote and local videoconferencing and provides contact management and centralized configuration management...

CVE-2021-31373

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

Cross site scripting

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80163)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to gain unauthorized access to sensitive information in the web interface...

HPE Aruba ClearPass Policy Manager Remote Authentication Bypass Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution. a security vulnerability exists in the web management interface of HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information on the platform, which could bypass system...

Aruba ClearPass Policy Manager 信息泄露漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information in the web interface...

IBM Business Automation Workflow 跨站脚本漏洞

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability.IBM Business Automation Workflow suffers from a cross-site scripting vulnerabilit...

Aruba ClearPass Policy Manager 安全漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to gain unauthorized access to sensitive information in the web interface...

Nagios XI 跨站脚本漏洞

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A reflective cross-site scripting vulnerability exists in the generic user interface of versions of Nagios XI prior to 5.8.4. An...

CVE-2021-31373

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

The vulnerability in the VMI web interface of vCenter Server Appliance, a management tool for VMware vCenter Server virtual infrastructure, allows an attacker to gain unauthorized access to protected information.

The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in path name checking for access to restricted directories. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by...

The vulnerability in the VMI web interface of vCenter Server Appliance, a management tool for VMware vCenter Server virtual infrastructure, allows an attacker to gain unauthorized access to protected information.

The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in system security restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending a specially crafte...

Juniper Networks Junos OS 跨站脚本漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS suffers from a cross-site scripting vulnerability that originates from a persistent cross-site...

CVE-2021-20121

The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...