12946 matches found
wildfly: XSS via admin console when creating roles in domain mode
A flaw was found in Wildfly. While creating a new role in the domain mode via the admin console, it is possible to add a payload in the name field, leading to a Cross-site scripting attack XSS. The highest threat from this vulnerability is to confidentiality and integrity...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 6 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
wildfly: XSS via admin console when creating roles in domain mode
A flaw was found in Wildfly. While creating a new role in the domain mode via the admin console, it is possible to add a payload in the name field, leading to a Cross-site scripting attack XSS. The highest threat from this vulnerability is to confidentiality and integrity...
wildfly: XSS via admin console when creating roles in domain mode
A flaw was found in Wildfly. While creating a new role in the domain mode via the admin console, it is possible to add a payload in the name field, leading to a Cross-site scripting attack XSS. The highest threat from this vulnerability is to confidentiality and integrity...
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225
CVE-2021-31225 affects Stormshield SES Evolution prior to 2.1.0. The issue allows deleting resources not currently in use by any security policy by leveraging access to a computer with the administration console installed. The impact relates to resource deletion with partial integrity and availab...
Stormshield SES Evolution 授权问题漏洞
Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows the deletion of some security policies when accessing a computer on which the management console is...
The vulnerability of the WritePNGImage function in the console-based image editing tool ImageMagick involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and cause service interruptions.
The vulnerability of the WritePNGImage function in the console-based ImageMagick graphics editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...
Microsoft Windows Console Driver 权限许可和访问控制问题漏洞
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Console Driver in...
PT-2021-5645 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Console Driver component of Microsoft Windows operating systems. It allows an attacker to bypass security...
Stormshield SES Evolution 授权问题漏洞
Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows some security policies to be read while accessing a computer with the management console installed, a...
KLA12221 Multiple vulnerabillities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of...
Stormshield SES Evolution 授权问题漏洞
Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from allowing some security policies to be updated on computers with access to a management console installed, and affects the followi...
CVE-2021-21567
Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege...
Pandora FMS 7.54 Cross Site Scripting
Exploit Title: XSS vulnerability for keywords searching parameter in pandorafms-754/pandoraconsole/ visual console Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 07.12.2021 Vendor: https://pandorafms.com/ Link:...
Stormshield SES Evolution 安全漏洞
Stormshield SES Evolution is a security solution from the French company Stormshield. A security vulnerability existed prior to SES Evolution 2.1.0, which allowed the deletion of some resources not currently used by any security policy by exploiting access to a computer with the management consol...
Command injection
An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments...
baigo CMS Cross-Site Scripting Vulnerability (CNVD-2021-53924)
baigo CMS is an open source PHP-based web content management system CMS. baigo CMS v4.0 contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web script or HTML by submitting form parameters to a public console configuration file...
baigo CMS 跨站脚本漏洞
baigo CMS is an open source PHP-based web content management system CMS. baigo CMS v4.0 contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web script or HTML by submitting form parameters to a public console configuration file...
