CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

CVE-2017-3829

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

PT-2017-2833 · Citrix · Citrix Netscaler Sd-Wan +1

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 Description: The issue exists due to insufficient input validation in the management interface component of Citrix NetScaler SD-WAN. This allows a remote attacker to execute arbitrary...

Plone 5.0.5 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Plone 5.0.5 Fixed in: Hotfix 20170117 Fixed Version Link: https://plone.org/security/hotfix/20170117 Vendor Contact: [email protected] Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/05/2016...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170215-cucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbon...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

Sophos Web Appliance Remote Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request for injection...

Sophos Web Appliance Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrReport.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request to inject a system command and execute it...

TP-Link C2 / C20i Command Injection / Denial Of Service

TP-Link CS and C20i are vulnerable to command injection, denial of service, and improper firewall rule issues. Title: TP-Link C2 and C20i vulnerable to command injection authenticated root RCE, DoS, improper firewall rules Advisory URL: https://pierrekim.github.io/advisories/2017-tplink-0x00.txt...

TP-Link C2 / C20i Command Injection / Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: TP-Link C2 and C20i vulnerable to command injection authenticated root RCE, DoS, improper firewall rules Advisory URL: https://pierrekim.github.io/advisories/2017-tplink-0x00.txt Blog URL:...

UBUNTU-CVE-2016-7147

Cross-site scripting XSS vulnerability in the managefindResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the objids:tokens parameter...

CVE-2017-3805

A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2016-9222

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

CVE-2016-9222

A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvb15229. Known...

Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface - Lenovo Support US

No description provided...

Juniper Junos Elevation of Privilege Vulnerability (CNVD-2017-00606)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability in the Juniper Junos Space WEB management interface allows remote attackers to submit special requests, create privileged users, and elevate privileges...

Juniper Junos Cross-Site Scripting Vulnerability (CNVD-2017-00608)

Juniper Junos is a network operating system dedicated to the company's hardware systems. Cross-site scripting exists in the Juniper Junos Space WEB management interface, which allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used to gain acces...