17442 matches found
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...
The vulnerability in the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, allows attackers to execute cross-site scripting attacks.
The vulnerability of the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...
The vulnerability in the web interface for managing Cisco Enterprise Chat and Email allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface for managing Cisco Enterprise Chat and Email involves inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by sending...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...
The vulnerability in the web interface for managing Cisco Enterprise Chat and Email allows attackers to perform cross-site scripting attacks.
The vulnerability of the web interface for managing Cisco Enterprise Chat and Email is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created website...
The vulnerability in the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, allows attackers to execute cross-site scripting attacks.
The vulnerability of the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.
The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...
Input validation
A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 All...
Mageia: Security Advisory (MGASA-2014-0317)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
多款Schneider Electric产品安全漏洞
Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric, a French company. A security vulnerability exists in a number of Schneider Electric products, which stems from. The vulnerability allows an attacker to gain unauthoriz...
H2 Database Console Remote Code Execution Exploit
The H2 Database console suffers from an unauthenticated remote code execution vulnerability. Document Title =============== Unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. Product Description =============== The H2 Console Application The Console lets you access a SQL databas...
WebACMS 2.1.0 Cross Site Scripting Vulnerability
Product: WebACMS Vendor: AFI Solutions GmbH Tested Version: 2.1.0 Fixed Version: - Vulnerability Type: Cross-Site Scripting CWE-79 CVSSv2 Severity: AV:N/AC:L/Au:N/C:P/I:P/A:N Score 6.4 CVSSv3 Severity: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Score 6.1 Solution Status: Unfixed Manufacturer Notificatio...
ThoughtWorks GoCD Web interface detection
Binary data gocdwebdetect.nbin...
Damon database management system has a file deletion vulnerability
Damon Database Management System is a centralized management platform to monitor, manage and maintain DM databases through a web interface. A file deletion vulnerability exists in Damon Database Management System, which can be exploited by attackers to delete files...
Damon database management system has a file upload vulnerability
Damon Database Management System is a centralized management platform to monitor, manage and maintain DM databases through a web interface. There is a file upload vulnerability in Damon Database Management System, which can be exploited by attackers to obtain server control privileges...
Moodle 访问控制错误漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. an access control error vulnerability exists in Moodle, which stems from the calendar:manageentries feature allowing managers to acces...
Telos Alliance Telos Z/Ip One 路径遍历漏洞
The Telos Alliance Telos Z/Ip One is a single space rack unit from Telos Alliance USA. 1 Ru rackmount Ip codec for remote broadcasting. A path traversal vulnerability exists in Telos Alliance Telos Z/IP One versions prior to 4.0.0r that stems from the software's lack of filtering and escaping of...