CVE-2020-12595

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...

PT-2020-16977

Name of the Vulnerable Software and Affected Versions Barco wePresent WiPG-1600W version 2.5.1.8 Description The issue concerns unprotected transport of credentials. An attacker can exploit this to issue an authenticated query and display the admin password for the main web user interface, which...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2020-68256)

IBM Jazz Reporting Service JRS is a suite of ready-to-use reporting components from IBM in the United States. The product includes features such as report generation, data collection and lifecycle queries. IBM Jazz Reporting Service has a security vulnerability that makes it susceptible to stored...

CVE-2020-4672

IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186285...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2020-63977)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting vulnerability exists in IBM Sterling B...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2020-62469)

IBM Content Navigator is a Web client that provides users with a console that enables them to access, manage, and use corporate content anytime, anywhere, from any location in the organization on virtually any mobile device. A cross-site scripting vulnerability exists in IBM Content Navigator...

CVE-2020-4760

IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188737...

The vulnerability of the Google Chrome browser’s WebUI user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s WebUI interface relates to the use of memory after it is freed during the processing of HTML content. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

Cisco Integrated Management Controller Command Injection Vulnerability (CNVD-2020-70859)

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A command injection vulnerability exists in the web UI of Cisco Integrated Management Controlle...

DEBIAN-CVE-2020-15983

Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page...

Command injection

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...

CVE-2020-27887: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...

IBM Spectrum Scale Cross-Site Scripting Vulnerability (CNVD-2020-59701)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM Spectrum Scale Cross-Site Scripting Vulnerability (CNVD-2020-58213)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2020-4755

IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188595...

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting Vulnerabilities

IBM Sterling B2B Integrator and others are products of IBM Corporation in the U.S.A. IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions, and relationships.IBM Sterling File Gateway is a suite of file transfer software.IBM Sterling File Gateway...

The vulnerability in the Web UI of the Cisco Unified Communications Manager system, as well as the Cisco Unified Communications Manager Session Management Edition (SME) system for managing IP telephony, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Web UI of the Cisco Unified Communications Manager system, as well as the Cisco Unified Communications Manager Session Management Edition SME system for managing IP telephony, is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability cou...

CVE-2020-4680

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186426...

CVE-2020-4679

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186424...

CVE-2020-4681

IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186427...