Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

CVE-2016-1401

Cisco UCS Central Cross-Site Scripting (CVE-2016-1401) affects Cisco UCS Central Software 1.4(1a) management interface. The vulnerability arises from insufficient input validation in the HTTP web interface, enabling an unauthenticated/remote attacker to induce a user to click a crafted link and i...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

Cisco Unified Computing System UCS Central is a suite of software from Cisco that manages the Cisco UCS server domain. The software provides policy-based automation of servers to improve IT efficiency and centralized fault overview of rapid problem solving and other features. A cross-site scripti...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Computing System UCS Central Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. SPDX-FileCopyrightText: 2016...

phpMyAdmin Multiple XSS Vulnerabilities (PMASA-2016-12) - Windows

phpMyAdmin is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

forums.windowscentral.com IFRAME Injection vulnerability

Vulnerable URL: http://forums.windowscentral.com/ask/?do=ask=%22%3E%3Ch1%3Ea%3C/h1%3E%3Ciframe%20srcdoc=%22%3Cp%3EHello%20world!%3C/p%3E%22%20src=%22https://www.openbugbounty.org%22%3E%3C/iframe%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to execute arbitrary operating system commands.

The vulnerability of the Cisco Unified Computing System Central device’s centralized management system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

Sophos Cyberoam Central Console (CCC) Detection (HTTP)

HTTP based detection of Sophos Cyberoam Central Console CCC. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Sophos Cyberoam Central Console (CCC) Detection (SSH Login)

SSH login-based detection of Sophos Cyberoam Central Console CCC. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cyberoam Central Console 02.03.1 Cross Site Scripting

Document Title: =============== Cyberoam Central Console v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-18 Vulnerabilit...

The vulnerability of the software for managing devices in the OnCell Central Manager allows a hacker to gain administrator privileges.

The vulnerability of the MessageBrokerServlet servlet, a software component used for managing devices in the OnCell Central Manager network, is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain administrat...

The vulnerability of the software for managing devices in the OnCell Central Manager allows a hacker to gain administrator privileges.

The vulnerability of the login function in the RequestController class of the software tool for managing devices in the OnCell Central Manager network is related to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

ManageEngine Desktop Central <= 9.1.099 Reflected XSS Vulnerability

ManageEngine Desktop Central is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-17 Vulnerability Laboratory ...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

A vulnerability in the web framework of Cisco Unified Computing System UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2016-1352

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...

CVE-2016-1352

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...

Input validation

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...