Design/Logic Flaw

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

CVE-2019-3639 MWG UI: Cross-Frame Scripting vulnerability

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

CVE-2019-3639: Improper Restriction of Rendered UI Layers or Frames

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

PT-2019-4146

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions 7.8.2.x prior to 7.8.2.12 Description The issue is related to insufficient input validation in the Administrator web console of McAfee Web Gateway. It allows a remote attacker to conduct a clickjacking attack using ...

PT-2019-3273

Name of the Vulnerable Software and Affected Versions IntelR Raid Web Console 2 affected versions not specified Description The issue is related to an authentication bypass in the web console, potentially allowing an unauthenticated attacker to disclose information via network access. The...

Intel® RAID Web Console 2 Advisory

Summary: Intel has identified a potential vulnerability in the Intel® RAID Web Console 2 RWC2. Intel has issued a Product Discontinuation notice for RWC2. Intel recommends that users uninstall Intel® RWC2, then install RAID Web Console 3 RWC3. Vulnerability Details: CVEID: CVE-2019-0173...

3CX Phone system (web) management console code issue vulnerability

3CX Phone system web management console is a web-based management console program for the 3CX phone system. A code issue vulnerability exists in 3CX Phone system web management console versions 12.5.44178.1002 through 12.5 SP2. The vulnerability arises from an improperly designed or implemented...

PT-2019-3533

Name of the Vulnerable Software and Affected Versions Moxa EDR 810 versions 5.1 and prior Description The issue allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, potentially leading to remote code execution. It is due to insufficient input...

CVE-2019-13176

An issue was discovered in the 3CX Phone system web management console 12.5.44178.1002 through 12.5 SP2. The Content.MainForm.wgx component is affected by XXE via a crafted XML document in POST data. There is potential to use this for SSRF reading local files, outbound HTTP, and outbound DNS...

Cross-Site Scripting (XSS)

web-console is vulnerable to cross-site scripting. The vulnerability, caused by missing X-Frame-Options and CSRF protections, in the oauth/token/request endpoint could allow a remote attacker to retrieve a token for CLI usage when using non default configs...

Red Hat JBoss Application Server (AS) Console and Web Management Misconfiguration Vulnerability - Active Check

The default configuration of Red Hat JBoss Application Server AS does not restrict access to the console and web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests. SPDX-FileCopyrightText: 2019 Greenbone AG Some text...

The vulnerability of the Intel RAID Web Console 3 web console interface, related to insufficient session verification, allows attackers to escalate their privileges.

The vulnerability of the Intel RAID Web Console 3 RWC3 web console interface is related to insufficient session verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Intel RAID Web Console 3 Input Validation Error Vulnerability

Intel RAID Web Console 3 RWC3 is a Web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel RAID Web Console 3 suffers from an input validation error vulnerability that stems from the program...

Intel® RAID Web Console 3 for Windows* Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console 3 RWC3 for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11119 Description: Insufficient session validation ...

PT-2019-2395 · Intel · Intel Raid Web Console 3

Name of the Vulnerable Software and Affected Versions: Intel RAID Web Console 3 RWC3 versions 4.186 and before Description: The issue is related to insufficient session validation in the service API, which may allow an unauthenticated user to potentially enable escalation of privilege via network...

Commvault Web Console Detection

Binary data commvaultwebconsoledetect.nbin...

Improper access control

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials plain text and the web-console password base64 via the debugging console...

CVE-2018-20008

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials plain text and the web-console password base64 via the debugging console...

CVE-2018-20008

iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials plain text and the web-console password base64 via the debugging console...

CVE-2018-20008

CVE-2018-20008 affects iBall Baton iB-WRB302N20122017 devices. The issue is improper access control on the UART interface, allowing a physical attacker with access to the debugging console to retrieve Wi‑Fi credentials (plain text) and the web‑console password (base64). The root cause is limited ...