94 matches found
TIBCO Security Advisory: October 8, 2019 - TIBCOMDM
TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities Original release date:October 8, 2019 Last revised: CVE-2019-11212 Source: TIBCO Software Inc. TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities Original release date: October 8, 2019 Last revised: --- Source: TIBCO Software Inc. Systems...
CVE-2019-1822 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because t...
PT-2019-1583 · Cisco · Cisco Dna Center
Name of the Vulnerable Software and Affected Versions: Cisco DNA Center versions prior to 1.2.5 Description: A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...
Open-Xchange OX App Suite Cross Site Scripting / SSRF
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 59653 Bug ID Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.0 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.0-rev13 Vendor notification:...
Open redirect
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a group, the script code gets executed in the context of the user which creates or changes the group by using autocomplete. In most cases this is a...
CVE-2016-6854
CVE-2016-6854 affects Open-Xchange OX Guard prior to 2.4.2-rev5. An injection flaw allows a script to run when verifying an inline PGP signature in a mail, enabling malicious code to execute in a user’s context and potentially hijack sessions or trigger actions via the web interface. Fixed in 2.4...
Cisco Unified Web Interaction Manager Web Interface Security Restriction Bypass Vulnerability
Cisco Unified Web Interaction Manager is a WEB interaction manager. An input validation vulnerability in Cisco Unified Web Interaction Manager WEBjiekou could be exploited by a remote attacker to submit a special request to view, modify, or delete data stored on the target system...
PT-2016-61
Name of the Vulnerable Software and Affected Versions TP-Link wireless router management system affected versions not specified Description The issue is caused by resource management errors in the web interface of the TP-Link wireless router management system. An attacker can exploit this issue b...
CUPS crossite scripting
Crossite scripting in Web interface...
Multiple Thomson TCW690 security vulnerabilities.
It's possible to access web interface without username and password. Denial of Service...
Multiple HP/Compaq products Web interface buffer overflow
No description provided...
[Full-Disclosure] exploiting fortigate firewall through webinterface
Issue: Several vulnerabilities in web interface of Fortigate firewall of which the most serious one will allow a remote attacker to obtain a username and password of the Fortigate. Release: pre 2.50 maintenance release 4 Fixed in: Fortinet OS 2.50 MR4, available from FTP as of 29 Sept. 2003 Date:...