2574 matches found
ntopng
ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...
CVE-2026-18196
IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to HTML injection (CWE-79). The flaw exists in the web user interface and Administration REST API due to improper output neutralization, which could allow a remote attacker to inject arbit...
CVE-2026-18196 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization...
CVE-2026-18195 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages...
CVE-2026-18195 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages...
CVE-2026-18195
IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to content spoofing. The flaw stems from improper output encoding of error messages , which falls under CWE-79 (Improper Neutralization of Input During Web Page Generation). A remote attac...
arachni-ui-web
Notice Arachni is heading towards obsolescence, try out its next-gen successor Ecsypno SCNR! Arachni - Web User Interface Version | 0.6.1.1 ---|--- Homepage | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github | http://github.com/Arachni/arachni-ui-web Documentation |...
CVE-2023-7357
A remote code execution (RCE) vulnerability exists in the FlexNet Publisher lmadmin web user interface. The underlying cause is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). This vulnerability can lead to unauthorized code execution on the system. The issue is...
EUVD-2023-60725
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
PT-2026-132378
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
CVE-2023-7357: Revera FlexNet Publisher: A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface
A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...
Revera FlexNet Publisher software supply chain issue vulnerability
The Revera FlexNet Publisher has a vulnerability related to the software supply chain. This vulnerability stems from a remote code execution flaw in the lmadmin web user interface, which may allow arbitrary code execution...
Security Bulletin: IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection (CVE-2026-18196 & CVE-2026-18195)
Summary IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection. Vulnerability Details CVEID:CVE-2026-18196 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to inject arbitrary HTML due to improper output neutralization...
Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178
The Project Browser module enables you to apply recipes and enable modules from the web user interface. The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks CSRF...
PT-2026-97666
Name of the Vulnerable Software and Affected Versions Drupal Project Browser versions 0.0.0 through 2.0.3 Drupal Project Browser versions 2.1.0 through 2.1.5 Description Cross-Site Request Forgery CSRF occurs when the Project Browser module, which allows applying recipes and enabling modules via...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into the WebUI through a crafted HTML page...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-4917, CVE-2026-4918, CVE-2026-4919)
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-4917 DESCRIPTION: IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL...
CVE-2026-18371: Improper Neutralization of Input During Web Page Generation
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...