codelift (>=0.6.3-canary.85.acbf24c.0, <=1.0.15-canary.394.652cc97.0), ra-gen-ui-lib (>=1.0.0-rc.3, <=1.0.0-rc.5) potentially affected by unknown CVE via apollo-server-micro (>=2.9.16, <=2.14.1)

apollo-server-micro NPM version =2.9.16, =0.6.3-canary.85.acbf24c.0, =1.0.0-rc.3, =1.0.0-rc.5 Source cves: unknown CVE Source advisory: GHSA-W42G-7VFC-XF37...

codelift (>=0.6.3-canary.85.acbf24c.0, <=1.0.15-canary.394.652cc97.0), ra-gen-ui-lib (>=1.0.0-rc.3, <=1.0.0-rc.5) potentially affected by unknown CVE via apollo-server-micro (>=2.9.16, <=2.14.1)

apollo-server-micro NPM version =2.9.16, =0.6.3-canary.85.acbf24c.0, =1.0.0-rc.3, =1.0.0-rc.5 Source cves: unknown CVE Source advisory: OSV:GHSA-W42G-7VFC-XF37...

XSS vulnerability in weiphp plugin micro exam Qu***.php page

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. An XSS vulnerability exists in the weiphp plugin microexamQu.php page. Attackers can use the vulnerability to insert malicious js code to obtain user cookie...

CVE-2020-11844

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

Authorization

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

CVE-2020-11844

CVE-2020-11844 describes an Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation. Affected products and versions include Hybrid Cloud Management (2018.05–2019.11), ArcSight Investigate (2.4.0, 3.0.0, 3.1.0), ArcSight Transformation Hub (3.0.0, 3.1.0, 3.2.0), ArcSig...

CVE-2020-11844 Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

CVE-2020-11844: Incorrect Authorization

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight...

PT-2020-12889

Name of the Vulnerable Software and Affected Versions Hybrid Cloud Management versions 2018.05 through 2019.11 ArcSight Investigate versions 2.4.0 through 3.1.0 ArcSight Transformation Hub versions 3.0.0 through 3.2.0 ArcSight Interset version 6.0.0 ArcSight ESM version 7.2.1 Service Management...

Trend Micro InterScan Web Security Virtual Appliance Code Execution Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. A remote attacker could...

Trend Micro InterScan Web Security Virtual Appliance Information Disclosure Vulnerability (CNVD-2020-31245)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. A remote attacker could...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31244)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in Trend Micro IWSVA version 6.5. The...

CVE-2020-8604

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...

CVE-2020-8603

A cross-site scripting vulnerability XSS in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2020-8605

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability...

CVE-2020-8606

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...

CVE-2020-8603

A cross-site scripting vulnerability XSS in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2020-8604

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations...

CVE-2020-8605

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability...

CVE-2020-8606

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance...