12977 matches found
Cross site scripting
Trend Micro Apex One 2019 is affected by a cross-site scripting XSS vulnerability on the product console. Note that the Japanese version of the product is NOT affected...
Security Bulletin: Vulnerability affects IBM Watson Assistant for IBM Cloud Pak for Data
Summary DOM-based vulnerability affects IBM Watson TM Assistant for IBM Cloud Pak for Data. A DOM-based, cross-site scripting vulnerability was found in the admin console where user input was not validated correctly. An authenticated user could exploit the flaw by injecting JavaScript code into t...
CVE-2019-19692
Trend Micro Apex One 2019 is affected by a cross-site scripting XSS vulnerability on the product console. Note that the Japanese version of the product is NOT affected...
Lansweeper Cross-Site Scripting Vulnerability (CNVD-2020-03133)
Lansweeper is an IT asset management system. A cross-site scripting vulnerability exists in the Web console in Lansweeper version 7.2.105.2. The vulnerability stems from the WEB application lacking proper validation of client-side data. An attacker can exploit the vulnerability to execute...
CVE-2019-18955
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019...
Path traversal
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019...
CVE-2019-18955
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019...
CVE-2019-18955
Affected product: Lansweeper Web Console (version 7.2.105.2). Vulnerability: Cross-Site Scripting (XSS) via the URL path, stemming from improper handling of client-side data in the web console. Impact as described in sources is limited to client-side script execution; no server-side compromise de...
New Wallarm Dashboard
There is an update in the Wallarm Console, which presents a brand new dashboard that can’t be missed. There are three significant changes that are worth mentioning: New structure. The dashboard has a new, clear structure emphasizing multiple modules of the Wallarm Platform — WAF, Scanner, FAST. T...
rhel bug fix update
An update is available for libiscsi, netcf, sgabios. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: Rocky Linux8.1 Snapshot3 - Passthrough PCI card...
virt:rhel bug fix update
Bug Fixes: AlmaLinux8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain kvm BZ1764829 HPE 8.1 BUG Icelake: KVM missing .pconfig BZ1775133 Failed to create a VM via virt-manager or web console in AlmaLinux8.1 snapshot-2.1 BZ1775134 Intel 8.2 Bug Icelake-Server host,...
ALBA-2019:4274 virt:rhel bug fix update
Bug Fixes: AlmaLinux8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain kvm BZ1764829 HPE 8.1 BUG Icelake: KVM missing .pconfig BZ1775133 Failed to create a VM via virt-manager or web console in AlmaLinux8.1 snapshot-2.1 BZ1775134 Intel 8.2 Bug Icelake-Server host,...
The vulnerability of the FortiMail email security system’s web console allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.
The vulnerability of the FortiMail email security system’s web console is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to the application...
The vulnerability in the Administrator web console of the McAfee Web Gateway web server allows a perpetrator to carry out a clickjacking attack.
The vulnerability of the Administrator web console of the McAfee Web Gateway lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a clickjacking attack using a specially crafted web page...
The vulnerability of the Intel Active System Console, related to deficiencies in access control, allows a intruder to escalate their privileges.
The vulnerability of the Intel Active System Console is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
EMC RSA Authentication Manager < 8.4 Patch 8 XSS (DSA-2019-168)
The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4 Patch 8 8.4.0.8. It is, therefore affected by a stored cross-site scripting vulnerability in the Security Console. A malicious, authenticated, remote Security Console administrator can exploit this...
CVE-2019-10695
Affected product: puppetlabs/cd4pe module (CD4PE) in Puppet Enterprise. Vulnerable component: cd4pe::root_configuration task exposes the root user’s username and password in the PE console’s Job Details pane. Root cause / impact: data exposure; no additional exploit details are provided. Remediat...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...
CVE-2013-4968
Puppet Enterprise before 3.0.1 allows remote attackers to 1 conduct clickjacking attacks via unspecified vectors related to the console, and 2 conduct cross-site scripting XSS attacks via unspecified vectors related to "live management."...