CVE-2021-40842

Summary: Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console due to improper input validation on the database name parameter required by unauthenticated APIs. A malicious URL reachable over the network could cause the backend database to execute a...

CVE-2021-40842

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the...

CVE-2021-40843

Proofpoint Insider Threat Management Server: Web Console unsafe deserialization vulnerability. An attacker with write access to the local database can cause arbitrary code execution with SYSTEM privileges on the server when a Web Console user retrieves data. When combined with a SQL injection fla...

CVE-2021-40843

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user triggers retrieval of...

Proofpoint Insider Threat Management Server 代码问题漏洞

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Server that stems from Proofpoint Insider Threat Management...

Exploit for Incorrect Default Permissions in Checkmk

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded applicati...

Exploit for Unrestricted Upload of File with Dangerous Type in Checkmk

CVE-2021-40905 - RCE via a crafted .mkp file Application:...

Update for IDOR vulnerability in System Center Operations Manager (KB5006871)

Update for IDOR vulnerability in System Center Operations Manager KB5006871 Applies to: System Center 2019 Operations Manager, System Center 2016 Operations Manager, System Center 2012 R2 Operations Manager Introduction This article describes an issue that is fixed for System Center Operations...

Vulnerability fixed in Microsoft System Center Operations Manager

Microsoft has fixed a vulnerability in System Center Operations Manager SCOM. The vulnerability allows a malicious remotely able to view files. The vulnerability is only exploitable on SCOM systems that have the web console installed. System Center:...

CVE-2021-41878

A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...

Cross site scripting

A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...

Fedora: Security Advisory for cockpit (FEDORA-2021-6d84fa5ea2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: cockpit-254-1.fc34

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

The vulnerability in the Intel Raid Web Console 3 relates to incorrect default access settings, allowing attackers to increase their privileges.

The vulnerability of the Intel Raid Web Console 3 web console relates to incorrect default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2021-35218

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server...

CVE-2021-35218

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server...

Deserialization of untrusted data

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server...

CVE-2021-35218 Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server...

CVE-2021-35218

CVE-2021-35218 affects the SolarWinds Patch Manager Web Console Chart Endpoint. The root cause is deserialization of untrusted data, leading to remote code execution. An attacker with network access can exploit this (authentication is required in some advisories, but bypass is noted in at least o...

Solarwinds Orion Patch Manager Web Console 代码问题漏洞

solarwinds Patch Manager is an application from solarwinds, Inc. It is used to manage third-party software. A security vulnerability exists in the Solarwinds Orion Patch Manager Web Console that stems from. deserialization of untrusted data in the Web Console chart endpoint could lead to remote...