1721 matches found
CVE-2019-12863: Improper Neutralization of Input During Web Page Generation
SolarWinds Orion Platform 2018.4 HF3 NPM 12.4, NetPath 1.1.4 allows Stored HTML Injection by administrators via the Web Console Settings screen...
PT-2020-9345
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform version 2018.4 HF3 NPM 12.4, NetPath 1.1.4 Description: The issue allows Stored HTML Injection by administrators via the Web Console Settings screen. This can be exploited by administrators with access to the Web...
The vulnerability of the Intel Raid Web Console 2 installer allows a hacker to increase their privileges.
The vulnerability of the Intel Raid Web Console 2 installer is related to incorrect standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...
Intel RAID Web Console 3 (RWC3) for Windows Elevation of Privilege Vulnerability
Intel RAID Web Console 3 RWC3 is a Web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel RAID Web Console 3 RWC3 for Windows elevation of privilege vulnerability. An attacker can exploit t...
Intel Raid Web Console 2 Elevation of Privilege Vulnerability
Intel Raid Web Console 2 is a web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. An elevation of privilege vulnerability exists in Intel Raid Web Console 2. An attacker can exploit the...
Intel Patches High-Severity Flaw in Security Engine
Intel is warning of a high-severity flaw in the firmware of its converged security and management engine CSME, which if exploited could allow privilege escalation, denial of service and information disclosure. CSME powers Intel’s Active Management System hardware and firmware technology, used for...
PT-2020-1975
Name of the Vulnerable Software and Affected Versions Intel Raid Web Console 2 versions all Description The issue is related to improper default permission settings. It may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For Intel Raid W...
Intellian Satellian Aptus Web Console Remote Code Execution Vulnerability
Intellian Satellian Aptus Web is a console system. A remote code execution vulnerability exists in the Intellian Satellian Aptus Web console. An attacker can execute arbitrary code on the target system by sending a malicious construct request to /cgi-bin/libagent.cgi using the Q field in the JSON...
Cross-Site Scripting (XSS)
activemq-web-console is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the listing of queue contents in the admin GUI...
CVE-2019-15712
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for...
Intel Fixes High-Severity Flaw in Performance Analysis Tool
Intel is warning of a high-severity vulnerability in its performance analysis tool called Intel VTune Profiler. If exploited the flaw allows an adversary to perform a privilege escalation attack, giving them elevated and unauthorized system access to a targeted system. The VTune Profiler, formerl...
PT-2020-1576
Name of the Vulnerable Software and Affected Versions Intel Raid Web Console 2 affected versions not specified Intel RWC 3 for Windows versions prior to 7.010.009.000 Description The issue is related to improper permissions in the installer, which may allow an authenticated user to potentially...
CVE-2013-0196
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
Cross site request forgery (csrf)
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
CVE-2013-0196
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
CVE-2013-0196: Cross-Site Request Forgery (CSRF)
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the credential and the Authorization: header when requesting the REST API via web browser...
Lansweeper Cross-Site Scripting Vulnerability (CNVD-2020-03133)
Lansweeper is an IT asset management system. A cross-site scripting vulnerability exists in the Web console in Lansweeper version 7.2.105.2. The vulnerability stems from the WEB application lacking proper validation of client-side data. An attacker can exploit the vulnerability to execute...
CVE-2019-18955
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019...