13070 matches found
CVE-2019-20434
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the Datasource creation page of the Management Console...
CVE-2019-20436
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. If there is a claim dialect configured with an XSS payload in the dialect URI, and a user picks up this dialect's URI and adds it as the service provider claim dialect while configurin...
CVE-2019-20436
Affected software: WSO2 API Manager 2.6.0; WSO2 IS as Key Manager 5.7.0; WSO2 Identity Server 5.8.0. Issue: configuring a claim dialect whose URI contains an XSS payload can cause execution when the URI is added as a service provider claim dialect during SP configuration, given the attacker has a...
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
Design/Logic Flaw
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2019-12427
CVE-2019-12427 affects Zimbra Collaboration before 8.8.15 Patch 1, with a non-persistent XSS vulnerability in the Admin Console. The connected Red Hat/OSV/CVE entries corroborate the same description. No remediation/versioned mitigation details are provided in the documents.
CVE-2019-12427
Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console...
CVE-2013-4770
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4770
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4770
The CVE-2013-4770 entry corresponds to a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x, with exploitation possible before 4.0.1. The affected product is EMC within Eucalyptus 4.0.x line; the vulnerability allows remote attackers to inject arbitrary web scri...
consoletradein.co.uk Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8525 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting consoletradein.co.uk website and its users. Following...
PT-2020-10445 · Wso2 · Wso2 Api Manager
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 Description: A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the Datasource creation page of the Management Console. Recommendations: For WSO2 API Manager version 2.6.0,...
The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
PT-2020-10447 · Wso2 · Wso2 Identity Server +2
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 WSO2 IS as Key Manager version 5.7.0 WSO2 Identity Server version 5.8.0 Description: An issue was discovered where if a claim dialect is configured with an XSS payload in the dialect URI, and a user adds this...
The vulnerability of the vcs_write function in the Linux kernel’s drivers/tty/vt/vc_screen.c file, which allows a hacker to increase their privileges.
The vulnerability of the vcswrite function in the Linux kernel’s drivers/tty/vt/vcscreen.c file is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2020-10448 · Wso2 · Wso2 Identity Server +2
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 WSO2 IS as Key Manager version 5.7.0 WSO2 Identity Server version 5.8.0 Description: An issue was discovered where a custom claim dialect with an XSS payload, when configured in the identity provider basic claim...
Administrators of a different forest are unable to log on to PVS Console
Error : "An unexpected MAPI error occurred" Details: Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index Administrators of same forest as that of PVS servers are able to log in to the console of PVS servers, however, administrators of a...