2366 matches found
CVE-2019-20434
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the Datasource creation page of the Management Console...
CVE-2019-20436
Affected software: WSO2 API Manager 2.6.0; WSO2 IS as Key Manager 5.7.0; WSO2 Identity Server 5.8.0. Issue: configuring a claim dialect whose URI contains an XSS payload can cause execution when the URI is added as a service provider claim dialect during SP configuration, given the attacker has a...
CVE-2019-20436
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. If there is a claim dialect configured with an XSS payload in the dialect URI, and a user picks up this dialect's URI and adds it as the service provider claim dialect while configurin...
CVE-2013-4770
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4770
Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-4770
The CVE-2013-4770 entry corresponds to a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x, with exploitation possible before 4.0.1. The affected product is EMC within Eucalyptus 4.0.x line; the vulnerability allows remote attackers to inject arbitrary web scri...
PT-2020-10445 · Wso2 · Wso2 Api Manager
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 Description: A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the Datasource creation page of the Management Console. Recommendations: For WSO2 API Manager version 2.6.0,...
The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
PT-2020-10447 · Wso2 · Wso2 Identity Server +2
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 WSO2 IS as Key Manager version 5.7.0 WSO2 Identity Server version 5.8.0 Description: An issue was discovered where if a claim dialect is configured with an XSS payload in the dialect URI, and a user adds this...
PT-2020-10448 · Wso2 · Wso2 Identity Server +2
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 WSO2 IS as Key Manager version 5.7.0 WSO2 Identity Server version 5.8.0 Description: An issue was discovered where a custom claim dialect with an XSS payload, when configured in the identity provider basic claim...
The vulnerability of Brodade’s IP and SAN network management system, related to deficiencies in user account storage, allows unauthorized access to protected information by attackers.
The vulnerability of the Brocade Network Advisor system for managing IP networks and Storage Area Networks is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through access to the JMX console...
VulnCheck KEV: CVE-2019-9489
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...
Putting Wallarm Management Console on a Fast Track
With this update we significantly reduced Elasticsearch load and thereby improved the responsiveness of the user interface with an attack showing up within seconds of being detected. Our new user-friendly interface has a lag time of no more than 5 seconds. The post Putting Wallarm Management...
Citrix XenApp Licenses have been Renamed to Citrix Virtual Apps
Citrix XenAppLicenses have been Renamed toCitrix Virtual Apps Name Change from XenApp to Citrix Virtual Apps Citrix Virtual Apps is the new name for XenApp beginning with the XenApp 7 release. The new name is reflected in all product licenses as well as all licensing-related pages and tools onMy...
Cross site scripting
This cross-site scripting XSS vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions...
CVE-2019-7184
CVE-2019-7184 is an XSS vulnerability in QNAP Video Station’s web interface. The issue allows remote attackers to inject and execute scripts in the administrator’s management console, typically via inadequate validation of client-side data. Impact is limited to the admin console session, with the...
CVE-2019-7184
This cross-site scripting XSS vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions...