2376 matches found
CVE-2016-1917
Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1918...
CVE-2016-3126
Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Symantec Messaging Gateway Multiple Vulnerabilities (SYM16-005)
Symantec Messaging Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-2002
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...
Command injection
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...
Incorrect Auto launch desktop status is shown in StoreFront Console
The value ofAuto launch desktop , which is configurable from the StoreFront management console under Manage Receiver for Web Sites Configure Client Interface Settings might not represent the true value of this property. This value can be reliably configured from the management console, but any...
Symantec Messaging Gateway Elevation of Privilege Vulnerability
Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in the management console of Symantec Messaging Gateway versions prior to 10.6.0-7. The vulnerability can be exploited...
Symantec Messaging Gateway Stored AD Password Vulnerability
Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in the management console of Symantec Messaging Gateway versions prior to 10.6.0-7. An attacker could exploit the...
BlackBerry Enterprise Service Management Console SQL Injection Vulnerability
BlackBerry Enterprise Service is a next-generation mobile device management platform. A SQL injection vulnerability exists in the Management Console component of BlackBerry Enterprise Service, which could be exploited by remote attackers to submit specially crafted SQL queries to manipulate or...
Symantec Endpoint Protection Multiple Security Issues
SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security findings that could potentially result in an authorized but less privileged user gaining elevated access to the Management Console. SEP Client security mitigations can potentially be bypassed allowing arbitrary code...
Apache ActiveMQ Web Console Cross-Site Scripting Vulnerability
Apache ActiveMQ is a popular messaging and integration model provider . Apache ActiveMQ 5.0.0 - 5.13.1 Multiple cross-site scripting vulnerabilities exist in the Web Management Console and in Java memory dumps due to incorrect user data output validation and improper privilege settings within...
Ubiquiti Inc.: Shell Injection via Web Management Console (dl-fw.cgi)
NCC Group Security Advisory https://www.nccgroup.trust -------------------------------------------- Shell Injection via Web Management Console Vendor: Ubiquiti Networks Vendor URL: https://www.ubnt.com Versions affected: airOS XM board line potentially all airOS lines, unverified Systems Affected...
Alcatel Lucent Home Device Manager Cross Site Scripting
Document Title: =============== Alcatel Lucent Home Device Manager - Management Console Multiple XSS CVE-Number: =========== CVE-2015-8687 Release Date: ============= 03 Jan 2016 Abstract Advisory Information: ============================= Ugur Cihan Koc discovered ten Reflected XSS vulnerabiliti...
The vulnerability of the WildFly application server and the JBoss Enterprise Application Platform, which allows attackers to carry out clickjacking attacks
The vulnerability of the Management Console Java-server component of the WildFly application server and the JBoss Enterprise Application Platform-related platform is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out...
CVE-2015-4112
The Management Console in BlackBerry Enterprise Server BES 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue...
CVE-2015-4112
The Management Console in BlackBerry Enterprise Server BES 12 before 12.2 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, related to a "cross frame scripting" issue...
CVE-2015-4112
CVE-2015-4112 affects the BlackBerry Enterprise Server (BES) Management Console. The issue arises because the console does not properly restrict the use of FRAME elements, enabling remote attackers to perform clickjacking via a crafted website (cross-frame scripting). Affects BES 12 before 12.2; ...
Symantec Endpoint Protection Multiple Vulnerabilities (Nov 2015)
Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
BlackBerry Enterprise Server Cross-Site Scripting Vulnerability
BlackBerry Enterprise Server is a component of the BlackBerry Enterprise Solution. An input validation vulnerability exists in the BlackBerry Enterprise Server management console, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used t...
