CVE-2019-4486

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164070...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2019-39205)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

IBM Cloud Orchestrator Cross-Site Scripting Vulnerability

IBM Cloud Orchestrator is a suite of cloud management solutions from IBM in the United States. The program provides extended internal and external deployment of cloud services and application program interfaces and tools to extend the integration with existing environments and other functions. A...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2019-34597)

IBM Jazz Reporting Service JRS is a set of ready-to-use reporting components. The product includes functionality for report generation, data collection, and lifecycle queries. A cross-site scripting vulnerability exists in IBM JRS, which can be exploited by remote attackers to inject arbitrary...

Cisco Firepower Management Center Buffer Overflow Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A buffer overflow vulnerability exists in the Web UI in Cisco Firepower Management Center that stems from inadequate input validation. A remote attacker could exploit the vulnerability by...

Cisco Firepower Management Center Operating System Command Injection Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An operating system command injection vulnerability exists in the Web UI of Cisco Firepower Management Center, which stems from the program's failure to adequately validate user input...

The vulnerability of the Web UI of the software-hardware management solution for Cisco Firepower Management Center allows a perpetrator to execute arbitrary commands on a vulnerable device.

The vulnerability of the Web UI of the Cisco Firepower Management Center’s network security management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable device remotely...

The vulnerability of the Web UI of the software-hardware management solution for Cisco Firepower Management Center allows a perpetrator to execute arbitrary commands on a vulnerable device.

The vulnerability of the Web UI of the Cisco Firepower Management Center’s network security management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable device remotely...

Multiple OS command injection vulnerabilities in DBA-1510P

Overview DBA-1510P provided by D-Link Japan K.K. contains multiple OS command injection vulnerabilities listed below. OS command injection vulnerability in Command Line Interface CLI CWE-78 - CVE-2019-6013 OS command injection vulnerability in Web User Interface CWE-78 - CVE-2019-6014 Katsuhiko...

JVN#95875796: Multiple OS command injection vulnerabilities in DBA-1510P

DBA-1510P provided by D-Link Japan K.K. contains multiple OS command injection vulnerabilities listed below. OS command injection vulnerability in Command Line Interface CLI CWE-78 - CVE-2019-6013 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score...

PT-2019-17130 · Ibm · Ibm Security Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Key Lifecycle Manager versions 2.6 through 3.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

The vulnerability in the Web UI of the Cisco IOS XE operating system, which allows a hacker to elevate their privileges to the root level

The vulnerability of the Cisco IOS XE operating system’s Web UI is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level remotely...

The vulnerability in the Web UI of the Cisco IOS XE operating system, which allows a hacker to execute arbitrary commands with elevated privileges

The vulnerability of the Cisco IOS XE operating system’s Web UI is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...

CVE-2019-12687

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted...

CVE-2019-12690

A vulnerability in the web UI of the Cisco Firepower Management Center FMC could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to insufficient validation of...

PT-2019-17123 · Ibm · Ibm Security Directory Server

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Server version 6.4.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2019-3532 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC affected versions not specified Description: The issue is related to insufficient validation of user-supplied input to the web UI, allowing an authenticated, remote attacker to inject arbitrary commands...

CVE-2019-4494

IBM Jazz Reporting Service JRS 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

PT-2019-17107 · Ibm · Ibm Jazz Reporting Service

Name of the Vulnerable Software and Affected Versions: IBM Jazz Reporting Service JRS versions 6.0 through 6.0.6.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2019-34392)

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. A cross-site scripting vulnerability exists in IBM JRS, which can be exploited by remote...