Cross site scripting

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

CVE-2018-1657

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

CVE-2018-1657

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

CVE-2018-1951

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Cross site scripting

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1657

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

CVE-2018-1657

IBM Publishing Engine versions 2.1.2, 6.0.5, and 6.0.6 are vulnerable to cross-site scripting (CWE) via the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Remediation provided by IBM bulletin includes upgrading to later ifix p...

CVE-2018-1951: Improper Neutralization of Input During Web Page Generation

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1657: Improper Neutralization of Input During Web Page Generation

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID:...

PT-2019-9336

Name of the Vulnerable Software and Affected Versions IBM Publishing Engine versions 2.1.2, 6.0.5, 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2019-9841

Name of the Vulnerable Software and Affected Versions IBM Publishing Engine versions 2.1.2, 6.0.5, 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

Security Bulletin: Jazz for Service Management exposes cross site request forgery vulnerability (CVE-2018-1709)

Summary Jazz for Service Management exposes cross site request forgery vulnerability when accessing Dashboard Application Services Hub. Vulnerability Details CVEID: CVE-2018-1709 DESCRIPTION: IBM Jazz for Service Management is vulnerable to cross-site scripting. This vulnerability allows users to...

Default credentials

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI...

CVE-2018-11742

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI...

CVE-2018-11742

CVE-2018-11742 affects NEC Univerge Sv9100 WebPro 6.00.00. The Web UI stores passwords in cleartext, per the provided descriptions, which could expose credentials. Connected sources corroborate Cleartext Password Storage in NEC WebPro 6.00.00 and reference public exploit discussions (e.g., Exploi...

CVE-2018-11742

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI...

PT-2018-10799

Name of the Vulnerable Software and Affected Versions NEC Univerge Sv9100 WebPro version 6.00.00 Description The issue concerns cleartext password storage in the Web UI. This means that passwords are stored in a plaintext format, which can be easily accessed by unauthorized parties. Recommendatio...

CVE-2018-11742: Insufficiently Protected Credentials

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI...

[SECURITY] [DLA 1615-1] nagios3 security update

Package : nagios3 Version : 3.5.1.dfsg-2+deb8u1 CVE ID : CVE-2013-7108 CVE-2013-7205 CVE-2014-1878 CVE-2016-9566 CVE-2018-18245 Debian Bug : 771466 823721 917138 Several issues were corrected in nagios3, a monitoring and management system for hosts, services and networks. CVE-2018-18245 Maximilia...

Security Bulletin: IBM Security Guardium is affected by a Cross-Site Scripting vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1817 DESCRIPTION: IBM Security Guardium is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...