7546 matches found
CVE-2021-39059: Improper Neutralization of Input During Web Page Generation
IBM Jazz Foundation IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
PT-2022-15359
Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.3 through 7.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. This ...
PT-2022-10869
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation versions 6.0.6 through 7.0.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...
FreeBSD : chromium -- multiple vulnerabilities (ac91cf5e-d098-11ec-bead-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ac91cf5e-d098-11ec-bead-3065ec8fd3ec advisory. - Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64...
CVE-2021-39024
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
Cross site scripting
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
CVE-2021-39024
IBM Guardium Data Encryption (GDE) versions 4.0.0.0 and 5.0.0.0 are vulnerable to cross-site scripting via the Web UI, enabling arbitrary JavaScript in trusted sessions and potential credential disclosure. The IBM Security Bulletin summarizes the issue and references CVE-2021-39024, with CVSS v3....
CVE-2021-39024: Improper Neutralization of Input During Web Page Generation
IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
PT-2022-10848
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Encryption GDE versions 4.0.0.0 through 5.0.0.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...
PT-2022-2481
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.64 Description The issue is related to a use after free in Web UI Diagnostics, which could potentially allow a remote attacker to exploit heap corruption via specific user interactions. This could...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc USA. Google Chrome suffers from a resource management error vulnerability that stems from a release-after-reuse in the Web UI diagnostics feature. A remote attacker could use this vulnerability to trick a victim into visiting a specially crafted web...
CVE-2022-23332
CVE-2022-23332 is a command-injection vulnerability in the Manual Ping Form (Web UI) of Shenzhen Ejoin Information Technology Co., Ltd. for ACOM508/ACOM516/ACOM532 devices (version 609-915-041-100-020). The flaw allows a remote attacker to inject arbitrary code via a field in the Web UI’s Manual ...
CVE-2022-23332: Improper Control of Generation of Code
Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...
Secomea GateManager Insufficient Privilege Vulnerability
Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...
Secomea GateManager Information Disclosure Vulnerability (CNVD-2022-38149)
Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from the exposure of information in Secomea GateManager's Web UI, and could be exploited by an attacker to allow logged-in...
IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2022-66263)
IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be...
IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2022-66262)
IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be...
Grandstream Networks UCM6200 Series SQLi (Web UI)
A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...