5046 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-3195
CVE-2016-3195 is a client-side cross-site scripting (XSS) vulnerability affecting Fortinet FortiManager Web-UI and FortiAnalyzer Web-UI. Affected: FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6; FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6. Cause: unspecified vectors enable remot...
JVN#58455472: OSSEC Web UI vulnerable to cross-site scripting
OSSEC Web UI is a web interface for use with Open Source HIDS Security OSSEC. OSSEC Web UI contains a cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...
Actiontec T2200H Remote Reverse Root Shell
Device Details Vendor: Actiontec Telus Branded, but may work on others Model: T2200H but likely affecting other similar models of theirs Affected Firmware: T2200H-31.128L.03 Device Manual: http://static.telus.com/common/cms/files/internet/telust2200husermanual.pdf Reported: November 2015 Status:...
VMware Aria Operations for Logs Web UI Detection
Binary data vmwarevrealizeloginsightwebuidetect.nbin...
FortiManager and FortiAnalyzer Client Side XSS vulnerability
A client side XSS vulnerablity in FortiManager/FortiAnalyzer could allow malicious script being injected in the Web-UI; this potentially enables XSS attacks...
Cisco UCS Platform Emulator Web UI Detection
Binary data ciscoucspewebuidetect.nbin...
QlikView Server Web UI Detection
Binary data qlikviewserverwebuidetect.nbin...
ATCOM PBX Authentication Bypass Vulnerability
ATCOM PBX is prone to an authentication bypass vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Faraday v1.0.20 - Collaborative Penetration Test and Vulnerability Management Platform
Faraday introduces a new concept - IPE Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the generated data during the process of a security audit. A brand new Faraday version is ready! Faraday v1.0.20 Community, Pro &...
VMware Aria Operations Web UI Detection
Binary data vmwarevrealizeoperationsmanagerwebuidetect.nbin...
WatchGuard Fireware XTM < 11.10.7 Open Redirect Vulnerability
WatchGuard Fireware XMT Web UI is prone to an open redirect vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
VMware vRealize Automation Web UI Detection
Binary data vmwarevrealizeautomationwebuidetect.nbin...
CVE-2016-3079
Multiple cross-site scripting XSS vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to systems/SystemEntitlements.do; 2 the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a...
CVE-2015-7999
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to systems/SystemEntitlements.do; 2 the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a...
Sql injection
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-7999
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-3079
CVE-2016-3079 covers multiple XSS vulnerabilities in the Web UI of Spacewalk and Red Hat Satellite 5.7, exploitable via several vectors in SystemEntitlements.do, EntitlementDetails.do, and System Set Manager components. The connected records indicate mitigations/patches exist: Red Hat issued RHSA...