Palo Alto Networks PAN-OS HTML Injection Vulnerability (CNVD-2017-20478)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A cross-site scripting vulnerability exists in the management web interface in Palo Alto Networks PAN-OS. A remote attacker could exploit this vulnerability to inject arbitrary web...

NTP Vulnerability

The Network Time Protocol NTP library has been found to contain a vulnerability CVE-2017-6460. Palo Alto Networks software makes use of the vulnerable library and may be affected. This issue only affects the management plane of the firewall. Ref PAN-76130 / CVE-2017-6460 Successful exploitation o...

Cross-Site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The attacks are possible because searchpagination function in course/classes/managementrenderer.php does not sanitized the search string in course management interface...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6749

CVE-2017-6749 describes a stored cross-site scripting (XSS) vulnerability in the Cisco Web Security Appliance (WSA) web-based management interface. An authenticated, remote attacker can exploit this by convincing a user to follow a crafted link, triggering script execution in the user’s browser s...

CVE-2017-6749

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

CVE-2017-6749: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. Affected Products: virtual and...

PT-2017-17289

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 10.1.0-204 Description A stored cross-site scripting XSS attack can be conducted by an authenticated, remote attacker against a user of the web-based management interface of an affected device. This...

Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Humax Wi-Fi Router HG100R Authentication Bypass Vulnerability

Humax Wi-Fi Router HG100R is a router device from Humax Digital, Korea. An authentication bypass vulnerability exists in the Humax Wi-Fi Router HG100R version 2.0.6. An attacker can exploit the vulnerability by sending a specially crafted request to the management console to retrieve sensitive...

CVE-2017-6734: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected device, related to the Guest Portal. More Information:...

PT-2017-17285

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software versions 1.30.909 through 2.10.800 Description A cross-site scripting XSS issue exists in the web-based management interface of the software, specifically related to the Guest Portal. This could allo...

CVE-2017-6700: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to conduct a Document Object Model DOM based environment or client-side cross-site scripting XSS attack against a us...

CVE-2017-6700

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to conduct a Document Object Model DOM based environment or client-side cross-site scripting XSS attack against a us...

PT-2017-17253

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 2.04.0.45B through 3.11 Description A reflected cross-site scripting XSS attack can be conducted by an unauthenticated, remote attacker against a user of the web-based management interface of an affected...

CVE-2017-6605: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a reflective cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc8541...

PT-2017-17178

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE version 2.10.800 Description A reflective cross-site scripting XSS attack could be conducted by an authenticated, remote attacker against a user of the web-based management interface of an affected device...

PT-2017-17254

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 2.04.0.45B through 3.11 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a Document Object Model DOM based cross-site scripting XSS...

CVE-2017-6699: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an...