Lucene search
+L

7782 matches found

Prion
Prion
added 2018/03/26 6:29 p.m.17 views

Cross site scripting

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially injec...

3.5CVSS5.5AI score0.01862EPSS
SaveExploits5References4Affected Software1
NVD
NVD
added 2018/03/26 6:29 p.m.32 views

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...

4.8CVSS4.8AI score0.01823EPSS
SaveExploits5References4
Prion
Prion
added 2018/03/26 6:29 p.m.27 views

Cross site scripting

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within the OneFS web administration interface. A malicious administrator may potentially...

3.5CVSS5.5AI score0.28186EPSS
SaveExploits5References4Affected Software1
Prion
Prion
added 2018/03/26 6:29 p.m.16 views

Cross site scripting

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may...

3.5CVSS5.5AI score0.01862EPSS
SaveExploits5References4Affected Software1
Prion
Prion
added 2018/03/26 6:29 p.m.19 views

Cross site scripting

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...

3.5CVSS5.5AI score0.02167EPSS
SaveExploits5References4Affected Software1
NVD
NVD
added 2018/03/26 6:29 p.m.21 views

CVE-2015-5045

The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...

3.3CVSS3.2AI score0.00328EPSS
SaveExploits0References2
OSV
OSV
added 2018/03/26 6:29 p.m.8 views

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...

4.8CVSS5.8AI score0.01823EPSS
SaveExploits5References4
ATTACKERKB
ATTACKERKB
added 2018/03/26 6:29 p.m.6 views

CVE-2015-5045

The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...

3.3CVSS5.5AI score0.00328EPSS
SaveExploits0References3
Prion
Prion
added 2018/03/26 6:29 p.m.17 views

Information disclosure

The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...

2.1CVSS5.7AI score0.00328EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/26 6:00 p.m.34 views

CVE-2018-1186

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially...

6.2AI score0.01823EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2018/03/26 6:00 p.m.28 views

CVE-2018-1202

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...

6.2AI score0.02167EPSS
SaveExploits5References4
CVE
CVE
added 2018/03/26 6:00 p.m.89 views

CVE-2018-1202

CVE-2018-1202 is a cross-site scripting vulnerability in the Dell EMC Isilon OneFS NDMP web page. The weakness arises in the OneFS Web administration interface where NDMP page input can inject HTML/JS into the user’s browser session. Affected are Isilon OneFS versions 8.0.0.0–8.0.0.6, 8.0.1.0–8.0...

4.8CVSS5.6AI score0.02167EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2018/03/26 6:00 p.m.33 views

CVE-2018-1201

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may...

6.2AI score0.01862EPSS
SaveExploits5References4
CVE
CVE
added 2018/03/26 6:00 p.m.51 views

CVE-2015-5045

CVE-2015-5045 affects IBM RLKS Administration and Reporting Tool. The vulnerability allows a local attacker to obtain sensitive information from RLKS before version 8.1.4.9 iFix 04 due to an unspecified issue in the Administration and Reporting Tool. Affected versions include 8.1.4 and 8.1.4.x up...

3.3CVSS3.3AI score0.00328EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/03/26 6:00 p.m.79 views

CVE-2018-1201

Dell EMC Isilon OneFS Web Console (Job Operations Page) is affected by cross-site scripting (CVE-2018-1201) across multiple releases (8.0.x, 8.1.x, 7.2.1.x, 7.1.1.11). Root cause: insufficient input sanitization in several endpoints (e.g., job/policies, cluster/identity, network, etc.) that proce...

4.8CVSS5.6AI score0.01862EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2018/03/26 6:00 p.m.26 views

CVE-2015-5045

The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...

3.2AI score0.00328EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/22 5:29 a.m.25 views

Input validation

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

6.5CVSS7AI score0.0111EPSS
SaveExploits1References1Affected Software1
Citrix
Citrix
added 2018/03/22 12:00 a.m.14 views

How to configure, deploy, and troubleshoot StoreFront-based assigned application actions in Workspace Environment Management (WEM)

Feature Overview From WEM version 4.6, assigned Applications actions can be applications published from a XenApp & XenDesktop Site. This feature addresses a common customer request to have WEM include the ability to provide published application shortcuts in desktop sessions and through the WEM...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2018/03/20 12:00 a.m.36 views

Kentico SQL Injection Vulnerability

Kentico is the United States Kentico Software Corporation of a set of ASP.NET-based content management system CMS. The system consists of two main tools : Kentico CMS Desk is used to edit the content of the page ; Kentico CMS Controls is used to edit and control various elements of the page . An...

7.2CVSS8.4AI score0.01116EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/19 2:29 p.m.20 views

Sql injection

Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface...

6.5CVSS7.4AI score0.01116EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder