CVE-2018-0220

A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0144

A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Prime Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Command Injection Vulnerability in Multiple Citrix Products

Citrix NetScaler Application Delivery Controller and others are products of Citrix Systems, Inc.Citrix NetScaler Application Delivery Controller ADC. NetScaler ADC is a suite of service and application delivery solutions Application Delivery Controller; NetScaler Gateway is a secure remote access...

CVE-2018-5314 - Authentication Bypass Vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an unauthenticated attacker with access to the NetScaler management interface to bypass authenticati...

Wireshark IPMI Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.IPMI dissector is one of the IPMI Intelligent Platform Management Interface parser...

CVE-2018-0206

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...

CVE-2018-0139

A vulnerability in the Interactive Voice Response IVR management connection interface for Cisco Unified Customer Voice Portal CVP could allow an unauthenticated, remote attacker to cause the IVR connection to disconnect, creating a system-wide denial of service DoS condition. The vulnerability is...

CVE-2018-0148

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

CVE-2018-0145

CVE-2018-0145 affects Cisco Data Center Analytics Framework (DCAF) web-based management interface. Vulnerability: reflected cross-site scripting (XSS) due to insufficient input validation. Condition: unauthenticated, remote attacker can lure a user to click a malicious link, enabling arbitrary sc...

CVE-2018-0148

CVE-2018-0148 affects Cisco UCS Director Software and Cisco IMC Supervisor Software, where the web-based management interface is vulnerable to cross-site request forgery (CSRF). An unauthenticated, remote attacker can induce an authenticated user to click a malicious link, enabling arbitrary acti...

CVE-2018-0206

The CVE affects Cisco Unified Communications Manager (CUCM) web-based management interface. It stems from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to trigger a reflected cross-site scripting (XSS) attack by guiding a user to click a crafted link...

CVE-2018-0129

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

CVE-2018-0129

CVE-2018-0129 is a reflected cross-site scripting (XSS) vulnerability in Cisco Data Center Analytics Framework (DCAF) web-based management interface. Unauthenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution in the user’s browser context or ...

Cisco Data Center Analytics Framework Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

Claymore Dual Miner Denial of Service Vulnerability

Claymore Dual Miner is a GPU monitoring software for mining virtual currency computing. A security vulnerability exists in the remote management interface in Claymore Dual Miner 10.5 and earlier versions. A remote attacker could exploit this vulnerability to read memory or cause a denial of servi...

CVE-2018-6317

CVE-2018-6317 affects Claymore’s Dual Miner remote management interface. Versions 10.5 and earlier are vulnerable to an unauthenticated format-string vulnerability that can read memory or cause a denial of service. A fixed version is 10.6 (per 1337DAY entry). Public references show exploit/media ...

Session fixation

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...

CVE-2017-15531

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...

SA158: Improper Restriction of Excessive Authentication Attempts in Reporter

SUMMARY Symantec Reporter does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter. AFFECTED PRODUCTS Reporter --- CVE | Affected Versions | Remediation CVE-2017-15531 | 10...