Pulse Secure Pulse Connect Secure Cross-Site Scripting Vulnerability

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. A cross-site scripting vulnerability exists in the rd.cgi file in versions of Pulse Secure PCS prior to 8.3R3. The vulnerability stems from a...

Advantech WebAccess/SCADA Arbitrary Code Execution Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An arbitrary code execution vulnerabili...

CVE-2018-20808

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX...

Magento cross-site scripting vulnerability (CNVD-2019-26240)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento versions 2.1.18 before 2.1, 2.2.9 befor...

Magento cross-site scripting vulnerability (CNVD-2019-26220)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

Magento Code Execution Vulnerability (CNVD-2019-39393)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9 and version 2.3...

Sony VAIO Update License Issue Vulnerability

Sony VAIO Update is a system update utility that comes pre-installed in Sony VAIO computers from Sony Japan. An authorization issue vulnerability exists in Sony VAIO Update 7.3.0.03150 and prior versions. The vulnerability stems from a lack of authentication measures or insufficient authenticatio...

Optergy Proton/Enterprise Arbitrary Code Execution Vulnerability (CNVD-2019-24770)

Optergy Proton/Enterprise is an enterprise building management system from Optergy USA. An arbitrary code execution vulnerability exists in Optergy Proton/Enterprise versions 2.3.0a and earlier. The vulnerability stems from an improper design or implementation during code development of a network...

Panasonic FPWIN Pro Buffer Overflow Vulnerability (CNVD-2019-17135)

Panasonic FPWIN Pro is a set of controller programming software from Panasonic Corporation of Japan. A buffer overflow vulnerability exists in Panasonic FPWIN Pro 7.3.0.0 and prior versions. The vulnerability stems from a networked system or product performing operations on memory without properl...

UBUNTU-CVE-2019-9086

HotelDruid before v2.3.1 has SQL Injection via the /visualizzatabelle.php anno parameter...

HPE Intelligent Management Center (IMC) operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An operatorGroupTreeSelectContent expression language injection remote code execution vulnerability exists...

HPE Intelligent Management Center (IMC) quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A quickTemplateSelect expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A perfAddorModDeviceMonitor expression language injection remote code execution vulnerability exists in HP...

HPE Intelligent Management Center (IMC) UrlAccessController Authentication Bypass Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An UrlAccessController authentication bypass vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center (IMC) Information Disclosure Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A JMX insecure configuration remote unauthenticated information disclosure vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A deploySelectBootrom expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) selViewNavContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A selViewNavContent expression language injection remote code execution vulnerability exists in HPE...

HPE Intelligent Management Center (IMC) Remote Command Injection Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A remote command injection vulnerability exists in HPE Intelligent Management Center IMC 7.3 E0506P09 and...

HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23769)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A dbman Opcode 10002 Arbitrary Backup Remote Code Execution vulnerability exists in HPE Intelligent...

HPE Intelligent Management Center (IMC) customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A customTemplateSelect expression language injection remote code execution vulnerability exists in HPE...