8150 matches found
Advantech WebAccess Dashboard Viewer openWidget Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose arbitrary file contents on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WebAccess Dashboard Viewer. Insufficient validation within the...
Advantech WebAccess Dashboard Viewer renameFolder Directory Traversal Denial of Service Vulnerability
This vulnerability allows remote attackers to deny service to all users on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WebAccess Dashboard Viewer. Insufficient validation within the renameFolder...
Advantech WebAccess Dashboard Viewer uploadImageCommon Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability found in Advantech WebAccess 8.0. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw...
CVE-2016-0854
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors...
Unrestricted file upload
Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors...
Latest WordPress Update Resolves XSS Vulnerability
Developers at WordPress are encouraging users of the content management system to download and apply the most recent update, pushed yesterday, to address a cross-site scripting XSS vulnerability. According to WordPress the bug exists in all versions before 4.4 and if exploited, could allow a hack...
Scientific Linux Security Update : pcs on SL7.x x86_64 (20151119)
A flaw was found in a way Rack processed parameters of incoming requests. An attacker could use this flaw to send a crafted request that would cause an application using Rack to crash. CVE-2015-3225 The pcs package has been upgraded to upstream version 0.9.143, which provides a number of bug fixe...
dashboard.admin.ucla.edu XSS vulnerability
Vulnerable URL: http://dashboard.admin.ucla.edu/portalbody.cfm?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
CentOS 7 : pcs (CESA-2015:2290)
An updated pcs package that fixes one security issue, several bugs, and add various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
who.is XSS vulnerability
Vulnerable URL: https://who.is/dashboard?filter=%22%3E%3Cscript%3Ealert%28%2Fxssposed%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 18.02.2016 Latest check for patch:| 18.02.2016 23:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection
The wp-stats-dashboard WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
WordPress WP Stats Dashboard <= 2.9.4 - Blind SQL Injection
Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands via "type" parameter. Solution Update the plugin...
SUSE-SU-2015:2064-1 Security update for openstack-dashboard
This update provides fixes and enhancements for openstack-dashboard, crowbar-barclamp-novadashboard and python-djangoopenstackauth. openstack-dashboard: - Reset flavors for other than 'Boot from Image' source type. bsc945515 - Add deactivated status for glance image. - Fix TemplateSyntaxError at...
RHEL 7 : pcs (RHSA-2015:2290)
An updated pcs package that fixes one security issue, several bugs, and add various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Moderate: Red Hat Security Advisory: pcs security, bug fix, and enhancement update
An updated pcs package that fixes one security issue, several bugs, and add various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Drupal User Dashboard模块SQL注入漏洞
No description provided by source...
Drupal User Dashboard Module SQL Injection Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.User Dashboard is one of the dashboard modules. A SQL injection vulnerability exists in the Drupal User Dashboard module in versions 7.x-1.x prior to 7.x-1.4. An attacker could use this...
Reflected Cross-Site Scripting (XSS) in iTop
Advisory ID: HTB23268 Product: iTop Vendor: Combodo SARL Vulnerable Versions: 2.1.0-2127 and probably prior Tested Version: 2.1.0-2127 Advisory Publication: July 29, 2015 without technical details Vendor Notification: July 29, 2015 Vendor Patch: July 30, 2015 Public Disclosure: September 23, 2015...
Cisco Secure Access Control Server Role-Based Access Control URL Lack of Protection Vulnerability
A vulnerability in the role-based access control RBAC implementation of the Cisco Secure Access Control Server ACS could allow an authenticated, remote attacker to impact the integrity of the system by modifying dashboard portlets that should be restricted. The vulnerability is due to improper...
Shopify: Missing authorization check on dashboard overviews
Users with access to view each channel's Overview could view parts of the Home screen, and vice versa. We fixed the issue by correctly checking for each permissions separately on the relevant endpoints. This was a missing cookie based authorization check which allowed users with limited privilege...