Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...

DEBIAN-CVE-2016-7180

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service use-after-free and application crash via a crafted packet...

Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco Firepower Management Center and FireSIGHT System Software are management center software from Cisco in the United States. A cross-site scripting vulnerability in the web-based management interface of Cisco Firepower Management Center and FireSIGHT System Software allows remote attackers to...

Cisco FireSIGHT System Software Session Fixation Vulnerability

A vulnerability in session identification management functionality of the web-based management interface for Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to hijack a valid user session. The vulnerability exists because the affected application does not assign a...

Plone Zope Management (ZMI) Reflective Cross-Site Scripting Vulnerability

Plone is a free, open source Content Management System CMS. A reflected cross-site scripting vulnerability exists in Plone Zope Management ZMI, where the ZMI page of Zope2 does not properly escape user input in many places...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

ObiHai ObiPhone 10321062 5-0-0-3497 - Multiple Vulnerabilities

ObiHai ObiPhone 10321062 5-0-0-3497 - Multiple Vulnerabilities ObiHai ObiPhone - Multiple Vulnerabilities ------------------------------------------ Introduction ============ Multiple vulnerabilities were discovered in the web management interface of the ObiHai ObiPhone products. The...

Huawei OceanStor ISM Product Cross-Site Scripting Vulnerability

OceanStor ISM is an integrated system management software that can manage CSS, view alerts and some basic information about CSS, and do some basic configuration, etc. A cross-site scripting vulnerability exists in the management interface of OceanStor ISM, due to the system not translating specia...

Skyrun TopSec Firewall cookie cid parameter command injection vulnerability

TopSec is a firewall appliance from Skyrunner. The /cgi/maincgi.cgi program in the WEB management interface of Tianrongxin firewall has a command injection vulnerability when handling the cid variable in the cookie passed from the client, which allows an attacker to execute arbitrary commands usi...

Nagios Network Analyzer 2.2.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Nagios Network Analyzer Multiple Vulnerabilities Affected versions: Nagios Network Analyzer = 2.2.0 PDF: http://www.security-assessment.com/files/documents/advisory/NagiosNetworkAnalyzerAdvisory.pdf +-----------+ |Description| +-----------+ Th...

Cisco Connected Streaming Analytics Unauthorized Access Vulnerability

Cisco Connected Streaming Analytics is a software platform for analyzing and summarizing real-time data streams from multiple sources. A security vulnerability exists in the web management interface of Cisco Connected Streaming Analytics that could be exploited by an authenticated, remote attacke...

CVE-2016-5670

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

Hardcoded credentials

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

CVE-2016-5670

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

Novell Filr Cross-Site Request Forgery Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site request forgery vulnerability exists in the management interface in Novell Filr 2.0 Security Update 1 and prior versions and 1.2 Security Update 2. A remote attacker could exploit this vulnerabilit...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Cisco Prime Service Catalog Reflected Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Prime Service Catalog PSC could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to...