Falcon System Consulting WisePoint and WisePoint Authenticator Clickjacking Attack Vulnerability

Falcon System Consulting WisePoint and WisePoint Authenticator are products of Falcon System Consulting, Japan. The former is an authentication system, and the latter is a product for enhancing the authentication mechanism of RADIUS protocol-enabled devices, such as SSL-VPN devices. A security...

Palo Alto Networks PAN-OS Command Injection Vulnerability (CNVD-2016-02034)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS. Due to the program failing to properly parse the input of an API call. An attacker could exploit this vulnerability to...

CVE-2016-1355

Cross-site scripting XSS vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687...

Cross site scripting

Cross-site scripting XSS vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687...

Cisco FireSIGHT System Software Device Management UI Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

ESM Console XSS vulnerability

A cross-site scripting vulnerability exists in the web-based console management. This vulnerability has been assigned CVE-2015-2223. This issue affects the management interface of Traps, where an authenticated administrator may be tricked into injecting malicious JavaScript into the web UI...

CVE-2016-1311

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

CVE-2016-1311

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

PT-2016-4701

Name of the Vulnerable Software and Affected Versions Cisco Jabber Guest Server version 10.68 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the host tag parameter. Recommendations For Cisco...

CVE-2016-1311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Jabber Guest Server 10.68 allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, aka Bug ID CSCuy08224...

PT-2016-1270 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: Openshift affected versions not specified Description: The issue is related to a lack of access control in the interface of a cluster management tool for Kubernetes virtual machines, allowing remote attackers to elevate their privileges. This...

Cisco Unity Connection User Search Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system's web interface. The vulnerability is due to insufficient input validation of a...

PT-2016-1245

Name of the Vulnerable Software and Affected Versions Cisco RV220W devices affected versions not specified Description The issue is related to a SQL injection vulnerability in the web-based management interface. This vulnerability allows remote attackers to execute arbitrary SQL commands via a...

CVE-2015-6319: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574...

UBUNTU-CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

F5 BIG-IP - BIG-IP last hop kernel module vulnerability CVE-2015-5516

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

IBM Security Access Manager for Web and Security Access Manager Command Injection Vulnerabilities

IBM Security Access Manager ISAM for Web formerly known as IBM Tivoli Access Manager for e-business and Security Access Manager ISAM are both products of IBM Corporation. The former is a set of products for user authentication, authorization and Web single sign-on solutions in the product, which...

Wireshark IPMI Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. The ipmifmtudpport function in epan/dissectors/packet-ipmi.c in the IPMI parser version 2.0.x prior to Wireshark 2.0.1 fails to properly access packet ranges, allowing remote attackers to launch a denial-of-service attack via crafted packets...

Ransom32 Ransomware-As-A-Service Written in JavaScript

Crimeware services are nothing new. Criminals for years have advertised on the underground not only malware, but management services and support for banking Trojans, exploit kits and more. Researchers this week turned up a new ransomware-as-a-service operation that pushes the first ransomware cod...

CVE-2015-5018

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface LMI access...