8267 matches found
Security Bulletin:Vulnerability in RC4 stream cipher affects InfoSphere Replication Dashboard (CVE-2015-2808)
Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects InfoSphere Replication Dashboard. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could...
Security Bulletin: InfoSphere Replication Dashboard is affected by a vulnerability in the IBM Runtime Environment, Java Technology Edition (CVE-2014-4263)
Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7.1.1.0 that is used by InfoSphere Replication Dashboard. These issues were disclosed as part of the IBM Java SDK updates in July 2014. IBM InfoSphere Replication Dashboard is affected by a sing...
Security Bulletin: InfoSphere Data Replication Dashboard is affected by a vulnerability in the IBM Runtime Environment, Java™ Technology Edition (CVE-2014-0453)
Summary An unspecified vulnerability related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact. Vulnerability Details CVE ID: CVE-2014-0453 CVSS: CVSS Base Score: 4 CVSS Temporal Score: See for the current score CVSS Environmental...
PHP Dashboards SQL Injection Vulnerability
A SQL injection vulnerability exists in PHP Dashboards. The vulnerability is caused due to a failure to adequately filter user-supplied data before it is used in the program's SQL queries, which can be exploited by an attacker to gain access to sensitive database information...
dashboard.scoot.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-630506 Description| Value ---|--- Affected Website:| dashboard.scoot.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Grafana Cross-Site Scripting Vulnerability
Grafana is a set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus and so on. A cross-site scripting vulnerability exists in the dashboard links in versions prior to Grafana 5.2.0-beta1. A...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
Cross site scripting
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
UBUNTU-CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
CVE-2018-12099
Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...
CVE-2018-12099
Grafana prior to 5.2.0-beta1 is affected by XSS in dashboard links (CVE-2018-12099). The issue stems from an incomplete fix, with later Nessus entries noting unpatched vectors in Grafana 5.3.1 related to this CVE. Remediation: upgrade to Grafana 5.2.0-beta1 or newer where the fix is included.
Graylog cross-site scripting vulnerability (CNVD-2018-11028)
Graylog is an open source log storage system , it supports the system log syslog saved to MongoDB distributed document storage database. A cross-site scripting vulnerability exists in the dashboard name in versions of Graylog prior to 2.4.4. A remote attacker can exploit this vulnerability to...
Cross site scripting
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...
CVE-2018-11651
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...
CVE-2018-11651
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...
CVE-2018-11651
Graylog before v2.4.4 is affected by an XSS vulnerability due to unescaped text in dashboard names, specifically in dashboard-related UI components (Dashboard.jsx, EditDashboardModal.jsx) and ShowDashboardPage.jsx. The issue enables script execution when dashboard names contain malicious content....
CVE-2018-11651
Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx...
Qualys Cloud Platform 2.33 New Features
This release of the Qualys Cloud Platform version 2.33 includes the release for CertView, plus updates and new features for AssetView, Cloud Agent, EC2 Connector, Security Assessment Questionnaire, Web Application Scanning, and Web Application Firewall, highlights as follows. This posting has bee...