CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

Information disclosure

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

CVE-2018-17555

CVE-2018-17555 affects ARRIS TG2492LG-NA devices. The issue is information disclosure via the web component, where remote attackers can obtain sensitive data through the /snmpGet oids parameter. Documents do not provide affected software versions, root cause details, exploit specifics, or remedia...

CVE-2017-10424

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Web. Supported versions that are affected are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier and 3.4.2.4181 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network...

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor Component (CNVD-2017-31053)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Monitoring: Web component of Oracle MySQL's MySQL Enterprise Monitor, which can be exploited by an attacker to compromise the confidentiality, integrity, and availability of the system...

Cross site scripting

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

Oracle Retail Open Commerce Platform Unauthorized Modification Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Web subcomponent of the Oracle Retail Open Commerce Platform component of...

Vulnerability in Intel® RealSense™ Web Component allows authenticated users to elevate privileges via updater subsystem

Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...

CVE-2016-3451

Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect integrity via vectors related to Web...

The vulnerability of the Cisco UCS Central device’s centralized management system allows a hacker to execute arbitrary code.

The vulnerability of the web-component of the Cisco UCS Central device management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted HTTP request from a remote location...

CVE-2014-3103

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...

CVE-2014-3103

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...

CVE-2014-3101

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

Authentication flaw

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2014-3101

The CVE-2014-3101 issue affects IBM Rational ClearQuest Web login: the login form fails to insert a delay after failed attempts in affected releases (7.1.x prior to 7.1.2.15, 8.0.0.x prior to 8.0.0.12, and 8.0.1.x prior to 8.0.1.5). This omission enables brute-force attempts to gain access. The I...

CVE-2014-3101

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2014-3103: Exposure of Sensitive Information to an Unauthorized Actor

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...

CVE-2014-3105: Exposure of Sensitive Information to an Unauthorized Actor

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate accoun...

CVE-2014-3101: Improper Authentication

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...