CVE-2015-7275: Improper Neutralization of Input During Web Page Generation

Dell Integrated Remote Access Controller iDRAC 6 before 2.85 and 7/8 before 2.30.30.30 has XSS...

CVE-2015-7271: Use of Externally-Controlled Format String

Dell Integrated Remote Access Controller iDRAC 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo...

CVE-2015-7273: Improper Restriction of XML External Entity Reference

Dell Integrated Remote Access Controller iDRAC 7/8 before 2.21.21.21 has XXE...

CVE-2015-7270: Improper Limitation of a Pathname to a Restricted Directory

Dell Integrated Remote Access Controller iDRAC 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal...

CVE-2015-7274: Undefined Security Weakness

Dell Integrated Remote Access Controller iDRAC 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands...

PT-2017-7182

Name of the Vulnerable Software and Affected Versions Dell Integrated Remote Access Controller iDRAC versions prior to 2.21.21.21 Description The issue is related to an XXE XML External Entity problem. Recommendations For versions prior to 2.21.21.21, update to version 2.21.21.21 or later to...

PT-2017-7181

Name of the Vulnerable Software and Affected Versions Dell Integrated Remote Access Controller iDRAC versions 6 before 2.80 Dell Integrated Remote Access Controller iDRAC versions 7/8 before 2.21.21.21 Description The issue allows attackers to cause a denial of service or possibly have other impa...

PT-2017-7179

Name of the Vulnerable Software and Affected Versions Dell Integrated Remote Access Controller iDRAC versions 6 before 2.80 Dell Integrated Remote Access Controller iDRAC versions 7/8 before 2.21.21.21 Description The issue allows directory traversal. Recommendations For versions 6 before 2.80,...

Design/Logic Flaw

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

PT-2017-1788

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central versions 3.12cB Cisco Integrated Management Controller IMC Software versions 3.12cB Description The issue is related to an open redirect vulnerability in the web interface of the affected systems. This...

CVE-2017-6604: URL Redirection to Untrusted Site

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

Cisco Integrated Management Controller Redirection Vulnerability

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of parameters in HTTP requests. An attacker could exploit...

CVE-2016-8789

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

PT-2017-9810

Name of the Vulnerable Software and Affected Versions Huawei eSpace Integrated Access Device IAD versions V300R001C03 through V300R001C07, V300R001C20 Description The issue allows an attacker to trick a user into clicking a URL containing malicious scripts, potentially leading to the obtainment o...

CVE-2016-8789: Improper Neutralization of Input During Web Page Generation

Huawei eSpace Integrated Access Device IAD with software V300R001C03, V300R001C04, V300R001C06, V300R001C20, and V300R001C07 allows an attacker to trick a user into clicking a URL containing malicious scripts to obtain user information or hijack the session, aka XSS...

CVE-2017-2687: Improper Neutralization of Input During Web Page Generation

Siemens RUGGEDCOM ROX I all versions contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link...

PT-2017-15474

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The integrated web server at port 10000/TCP is prone to reflected Cross-Site Scripting attacks. This occurs when an unsuspecting user is induced to click on a malicious link. Recommendations For...

PT-2017-17380

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM ROX I all versions Description The integrated web server could allow an authenticated user to perform stored Cross-Site Scripting attacks. This issue is related to the web server listening on port 10000/TCP. Recommendations F...

CVE-2017-3853

A vulnerability in the Data-in-Motion DMo process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution with root privileges in the virtual instance running on an affected device. The...

[SECURITY] Fedora 25 Update: freeipa-4.4.3-2.fc25

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...