PT-2017-1422

Name of the Vulnerable Software and Affected Versions Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A denial of service issue in the Setup Wizard component of the Android operating system is related to inadequate access control. This issue could allow a local attacker to require Goog...

PT-2017-1424

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1 Description A denial of service issue in the Setup Wizard component of the Android operating system is related to inadequate access control. This issue could allow a malicious application to cause a...

CVE-2017-0496: Undefined Security Weakness

A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is rated as Moderate because it may require a factory reset to repair the device. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1. Android...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Template Name field when renaming a template; 2 KDC Server host, 3 Kerberos Security Realm, 4 Kerberos Encryption Types, 5 Advanced...

CVE-2016-4948: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Template Name field when renaming a template; 2 KDC Server host, 3 Kerberos Security Realm, 4 Kerberos Encryption Types, 5 Advanced...

PT-2017-8628

Name of the Vulnerable Software and Affected Versions Cloudera Manager versions 5.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields in the Kerberos wizard, including the Template Name field, KDC Server host, Kerberos Security...

Design/Logic Flaw

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx...

CVE-2015-2794

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx...

CVE-2015-2794

DotNetNuke (DNN) prior to version 7.4.1 is affected: the installation wizard Install/InstallWizard.aspx can be accessed to reinstall the application and escalate to SuperUser. Root cause: post-installation installation wizard scripts not properly secured, enabling an unauthenticated remote bypass...

CVE-2015-2794

The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx...

XenDesktop Setup Wizard cannot add machines to an existing catalog

XenDesktop Setup Wizard fails to create new devices at the end of the wizard's process. Wizard has no issues connecting to VMWare VShere but fails to create VMs with error: CDFNETERROR,"XdSetupFinish: Clone for device XXXXX-003 exception: System.Exception: vmwware-wsnaprvmvc01 Duplicate template...

XenDesktop Setup Wizard fails on a Hyper-V Environment

The XenDesktop Setup Wizard might fail when creating Targets on a Hyper-V Environment under the following Scenarios: The vDisk is set to any kind of Write Cache that includes a Local Hard disk BDM Partition is selected as the Boot method for the Targets The XenDesktop Setup Wizard might present t...

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

CVE-2016-7883

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

Cross site scripting

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

CVE-2016-7883

Adobe Experience Manager 6.2 is affected by a cross-site scripting vulnerability in the “Create Launch” wizard caused by an input validation issue. The vulnerability involves the Launch wizard input processing and can enable XSS. Connected sources do not provide exploitation details or explicit r...

PT-2016-7413

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager version 6.2 Description The issue is related to an input validation problem in the create Launch wizard, which could be exploited for cross-site scripting attacks. Recommendations For Adobe Experience Manager version...

CVE-2016-7883: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attacks...

BSOD Error: "STOP 0x0000007E CVhdMp.sys with Kaspersky antivirus

When booting from the Network, to run the Imaging Wizard or simply to boot from a vDisk, the following Blue Screen message is displayed: STOP 0x0000007E CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

Revive Adserver: Reflected XSS in Step 2 of the Installation

"Cricetinae" : Short Description The dbName parameter in Step 2 of Installation Wizard is vulnerable to Cross-Site Scripting vulnerability when the form is returned with error. Vulnerability Details Cross-Site Scripting issue let's one to run a javascript of choice. It helps most of the client si...