12998 matches found
Digital Guardian Management Console Path Traversal Vulnerability
Digital Guardian Management Console is a suite of data protection software from Digital Guardian, Inc. in the United States. The software is capable of providing software that locates enterprise networks, servers, databases, and clouds to stop malicious behavior by users or malware on endpoints. ...
IBM Power Hardware Management Console Cross-Site Scripting Vulnerability
IBM Power Hardware Management Console HMC is a suite of graphical interface software from IBM in the United States for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A cross-site scripting vulnerability exists in IBM...
Xxe
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10078
Cross-site scripting XSS vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description...
CVE-2018-10176
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
CVE-2018-10176
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
CVE-2018-10174
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...
CVE-2018-10079
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating 1 config.xml or 2 servers.xml...
CVE-2018-10173
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
CVE-2018-10174
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...
CVE-2018-10175
Digital Guardian Management Console 7.1.2.0015 has an XXE issue...
Cross site scripting
Cross-site scripting XSS vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description...
CVE-2018-10173
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10079
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating 1 config.xml or 2 servers.xml...
Design/Logic Flaw
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
Directory traversal
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
CVE-2018-10175
CVE-2018-10175 affects Digital Guardian Management Console 7.1.2.0015 and is an XML External Entity (XXE) injection vulnerability. The connected CNVD entry specifies an XML external entity injection that could allow an attacker to cause external web requests, enumerate web content, or read files ...
CVE-2018-10079
Geist WatchDog Console 3.2.2 CVE-2018-10079: a weak ACL on C:\ProgramData\WatchDog Console allows a local attacker to modify configuration data by updating config.xml or servers.xml. Root cause is insecure file permissions in the data directory. Impact is limited to local modification of configur...