CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Design/Logic Flaw

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Zoho Site24x7 Mobile Network Poller SSL Certificate Validation Security Bypass Vulnerability

Zoho Site24x7 is a full-service website monitoring network that can easily, quickly and efficiently monitor users' websites, web pages and web servers, and provide rich reports to ensure the normal operation of websites. A security bypass vulnerability exists in Zoho Site24x7 Mobile Network Polle...

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

Design/Logic Flaw

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

CVE-2017-14582

The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate...

CVE-2017-14582

Zoho Site24x7 Mobile Network Poller for Android (before 1.1.5) does not verify SSL X.509 certificates, enabling MITM via self-signed certs. Affected component: Android client; root cause: absent certificate verification. Impact: potential disclosure of sensitive information; exploitation details ...

openSUSE Security Update : cacti (openSUSE-SU-2013:1377-1)

cacti was updated to version 0.8.8b to fix security issues and bugs. - Fixes CVE-2013-1434 CVE-2013-1435 - security: SQL injection and shell escaping issues - bug: Fixed issue with custom data source information being lost when saved from edit - bug: Repopulate the poller cache on new installatio...

DEBIAN-CVE-2013-1434

Multiple SQL injection vulnerabilities in 1 apipoller.php and 2 utility.php in Cacti before 0.8.8b allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Multiple xss issues in Liferay

Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulnerabilities where found in liferay. Because liferay has a "remember me" option in their login screen that stores an encrypted password in a cookie this is more problematic than it...

Liferay 5.x / 6.x Cross Site Scripting

Multiple xss issues in Liferay Description: Liferay Portal is an enterprise portal written in Java Multiple xss vulnerabilities where found in liferay. Because liferay has a "remember me" option in their login screen that stores an encrypted password in a cookie this is more problematic than it...

RRDBrowse <= 1.6 Remote Arbitrary File Disclosure Vulnerability

No description provided by source. I - TITLE Security advisory: Arbitrary file disclosure vulnerability in rrdbrowse II - SUMMARY Description: Arbitrary file disclosure vulnerability in rrdbrowse = 1.6 Author: Sebastian Wolfgarten sebastian at wolfgarten dot com, http://www.devtarget.org Date:...