CVE-2018-17246

CVE-2018-17246 affects Kibana prior to 6.4.3 and 5.6.13, due to an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a crafted request that attempts to execute JavaScript, potentially leading to arbitrary commands executed with the K...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8888

BlackBerry UEM Management Console is affected by a stored XSS in versions earlier than 12.10.0. The vulnerability allows an attacker to store script commands that can later run in the context of another Management Console administrator. Root cause: stored XSS in the console input handling. No rem...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8891

CVE-2018-8891 affects BlackBerry UEM’s Management Console. It involves stored cross-site scripting (XSS) vulnerabilities in versions earlier than 12.9.1, allowing an attacker to store script commands that could run in the context of another Management Console administrator. The connected sources ...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8892

CVE-2018-8892 describes a cross-site request forgery (CSRF) in the BlackBerry UEM Management Console. Affected product: BlackBerry Unified Endpoint Management (UEM) Management Console. Affected versions: earlier than 12.9.1. Root cause: CSRF allowing changes to UEM settings within an authenticate...

BSA-2018-743

Security Advisory ID : BSA-2018-743 Component : Hard-coded Credentials Revision : 3.1: Final A vulnerability in Brocade Network Advisor could allow an unauthenticated, remote attacker to log into the JMX Console of an affected system using an undocumented User credentials. The vulnerability is du...

The management console is unavailable because a root certificate is missing

After upgrading StoreFront from 3.9 to 3.12 CU1 - StoreFront console fails with 'The management console is unavailable because a root certificate is missing'...

The vulnerability of the console-based graphic editor ImageMagick, related to improper memory management, allows a hacker to cause a system failure or execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to improper memory handling. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...