1914 matches found
CVE-2017-18414
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html SEC-300...
The vulnerability of the Palo Alto Networks MineMeld software lies in the lack of protection for website structures, allowing attackers to execute arbitrary JavaScript code.
The vulnerability of the Palo Alto Networks MineMeld software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
The vulnerability of the Agent Handler component of the console for managing McAfee ePolicy Orchestrator integrated enterprise security solutions allows a perpetrator to disclose protected information.
The vulnerability of the Agent Handler component of the McAfee ePolicy Orchestrator console for managing enterprise security integrated solutions is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...
GHSA-W69W-JVC7-WJGV Undertow Missing Authorization when requesting a protected directory without trailing slash
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2018-20929
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint SEC-392...
CVE-2018-20929
CVE-2018-20929 affects cPanel prior to version 70.0.23. The vulnerability is an open redirect via the /unprotected/redirect.html endpoint (SEC-392). The available connected documents confirm the issue and its target endpoint but do not provide further technical details, impact, exploit status, or...
The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.
The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of its web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, allows attackers to disclose protected information.
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, includin...
The vulnerability of D-Link DI-524 router’s microprogramming software lies in the lack of protective measures for the website structure, allowing attackers to inject arbitrary JavaScript code into the device’s web interface pages.
The vulnerability of D-Link DI-524 router’s microprogram code exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject JavaScript code into the device’s web interface pages. The web configuration files,...
The vulnerability of the central server of the VMware Connection server in the virtualization system of VMware Horizon allows a hacker to gain unauthorized access to protected information.
The vulnerability of the central server of the VMware Connection server in the VMware Horizon workstation virtualization system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise protected information
The vulnerability of the Windows GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document or web page...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information
The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...
The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information
The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...
The vulnerability of Microsoft SharePoint Foundation software, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute cross-site scripting attacks and compromise the confidentiality of protected information.
The vulnerability of Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks and compromise the confidentiality of protected information throu...
The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools lies in the lack of protection for service data. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Team Foundation Server and Azure DevOps Server software lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, thereby compromising the confidentiality, integrity, and accessibility of...
CVE-2019-0312
CVE-2019-0312 affects SAP NetWeaver Process Integration (PI). The vulnerability arises because several PI pages (SAP_XIESR 7.10–7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL 7.10–7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information such as h...
The vulnerability of the PostgreSQL database management system lies in the lack of protection for operational data, which allows attackers to disclose sensitive information that should be protected.
The vulnerability of the PostgreSQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...