CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

Authentication flaw

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access...

CVE-2018-3696

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access...

CVE-2018-3699

CVE-2018-3699 is an Intel-affecting vulnerability in the Intel® RAID Web Console v3 for Windows. The issue is described as a cross-site scripting (XSS) vulnerability that may allow an unauthenticated user to elevate privileges via remote access. Affected product: Intel® RAID Web Console 3; vulner...

CVE-2018-3696

Intel® RAID Web Console 3 for Windows* (Windows, affected version before 4.186) is vulnerable to an authentication bypass that could allow an unprivileged user with local access to potentially gain administrative privileges. The issue is documented in CVE-2018-3696 and Intel’s advisory INTEL-SA-0...

Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...

Intel® RAID Web Console 3 for Windows* Authentication Bypass Advisory

Summary: A potential security vulnerability in Intel® RAID Web Console 3 for Windows may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3696 Description: Authentication bypass in the IntelR RAID We...

GHSA-HVWM-2624-RP9X Apache ActiveMQ web console vulnerable to Cross-site Scripting

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

Apache ActiveMQ web console vulnerable to Cross-site Scripting

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

Cross-Site Scripting (XSS)

ActiveMQ :: Web Console is vulnerable to cross-site scripting XSS attack. The attack is possible due to not properly encoding of QueueFilter parameter of web admin console on "queues.jsp"...

DEBIAN-CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

UBUNTU-CVE-2018-8006

An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the queue.jsp page of Apache ActiveMQ versions 5.0.0 to 5.15.5. The root cause of this issue is improper data filtering of the QueueFilter parameter...

H2 Database 1.4.196 - Remote Code Execution

H2 Database 1.4.196 - Remote Code Execution Exploit Title: H2 Database 1.4.196 - Remote Code Execution Google Dork: N/A Date: 2018-09-24 Exploit Author: h4ckNinja Vendor Homepage: https://www.h2database.com/ Software Link: http://www.h2database.com/h2-2018-03-18.zip Version: 1.4.196 and 1.4.197...

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Google Dork: N/A Date: 2018-09-27 Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor...

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor Homepage: www.informationbuilders.co.uk Software Link:...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

Xxe

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

CVE-2018-17411

CVE-2018-17411 describes an XML External Entity (XXE) vulnerability in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20. The issue is listed with high impact across confidentiality, integrity, and availability (CVSS v3 base score 9.8), with network access, no privileges required, and no u...