CVE-2019-19613

Halvotec RaQuest 10.23.10801.0 admin login page is vulnerable to an Open Redirect. An attacker on the same network can modify the victim’s request to redirect to a malicious site after authentication; fixed in Release 24.2020.20608.0.

CVE-2019-19613: URL Redirection to Untrusted Site

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request...

PT-2020-10200

Name of the Vulnerable Software and Affected Versions Halvotec RaQuest versions prior to 24.2020.20608.0 Description An issue was discovered in the login page of the admin application, which is vulnerable to an Open Redirect attack. This allows an attacker to redirect a user to a malicious site...

CVE-2018-3671

Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information...

CVE-2018-3671: Undefined Security Weakness

Escalation of privilege in Intel Saffron admin application before 11.4 allows an authenticated user to access unauthorized information...

PT-2018-16120

Name of the Vulnerable Software and Affected Versions Intel Saffron admin application versions prior to 11.4 Description The issue allows an authenticated user to escalate their privileges and access unauthorized information. Recommendations For versions prior to 11.4, update to version 11.4 or...

CVE-2018-1000095

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...

CVE-2018-1000095: Improper Neutralization of Input During Web Page Generation

oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3...

PT-2018-9274

Name of the Vulnerable Software and Affected Versions: oVirt versions 4.2.0 through 4.2.2 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the name/description of VMs portion of the web admin application. This vulnerability was fixed in version 4.2.3...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Design/Logic Flaw

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

CVE-2009-2201: Undefined Security Weakness

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...