4697 matches found
CVE-2018-15465
CVE-2018-15465 affects Cisco ASA software, where the authorization subsystem fails to properly validate user privileges in the web management interface. An authenticated but unprivileged user (levels 0/1) can issue specific HTTPS requests to perform privileged actions, potentially exposing sensit...
Cisco Adaptive Security Appliances Software authorization subsystem remote elevation of privilege vulnerability
Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of Cisco Cisco running in the firewall operating system. authorization subsystem is one of the authorization subsystem. A remote elevation of privilege vulnerability exists in the authorization subsystem in Cis...
Cisco ASA Privilege Escalation Vulnerability (cisco-sa-20181219-asa-privesc)
According to its self-reported version the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a privilege escalation vulnerability in web management interface due to improper validation of user privileges. An authenticated, remote attacker can exploit, by...
Cisco Adaptive Security Appliance Software Privilege Escalation Vulnerability
A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, but unprivileged levels 0 and 1, remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of...
Tarantella Enterprise Security Bypass Access Control Vulnerability
Tarantella Enterprise is a centralized data and application management tool that provides a Web management interface and runs on most Unix and Linux platforms. A security vulnerability exists in Tarantella Enterprise versions prior to 3.11. The vulnerability can be exploited to gain access to use...
SQL Injection Vulnerability in se***.php Page of Tianmu MVC Web Management System
Tianmu MVC website management system is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, the use of independent MVC framework, applicable to large and small and medium-sized enterprises of the open source MVC. Tianmu MVC website management system se.php pa...
Design/Logic Flaw
A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID...
CVE-2018-6434
A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID...
CVE-2018-6434
The CVE-2018-6434 issue affects Brocade Fabric OS WebGui where the session ID could be intercepted or manipulated via the web management interface on Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, or 7.4.2d. Root cause: insecure handling of session identifiers. Impact per documented sources: po...
PT-2018-14549 · D Link · Dsl-2640T
Name of the Vulnerable Software and Affected Versions: D-link DSL-2640T routers affected versions not specified Description: A security issue exists in the cgi-bin/webcm component of D-link DSL-2640T routers, where an XSS attack can be performed via the var:RelaodHref or var:conid parameter...
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CNVD-2019-01908)
Cisco Prime Collaboration Assurance PCA is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid...
GHSA-G4GG-9F62-JFPH OrientDB Studio web management interface is vulnerable to clickjacking attacks
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
OrientDB Studio web management interface is vulnerable to clickjacking attacks
The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
Cisco Identity Services Engine WEB Management Interface Arbitrary Command Execution Vulnerability
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security vulnerability...
CVE-2018-0445
A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...
CVE-2018-15425
CVE-2018-15425 affects Cisco Identity Services Engine (ISE) Web Management Interface. An authenticated, remote attacker can execute arbitrary commands on the underlying OS with web server privileges. This is described across multiple sources (including Cisco security advisory cisco-sa-20181003-is...
Vectra Cognito Brain and Sensor Web Management Console Cross-Site Scripting Vulnerability
Vectra Cognito Brain and Sensor is a cyber threat sensing system from Vectra Networks, USA. The system supports functions such as cyber attack detection and cyber threat search. A cross-site scripting vulnerability exists in the Web Management Console in Vectra Cognito Brain and Sensor versions...
Cross site scripting
Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting XSS vulnerability in the Web Management Console...
