CVE-2017-7736

A stored Cross-site Scripting XSS vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import...

CVE-2017-7736

The CVE-2017-7736 entry applies to Fortinet FortiWeb: a stored Cross-site Scripting (XSS) vulnerability on the webUI Certificate View page affecting FortiWeb versions 5.8.0, 5.7.1 and earlier. The root cause is a flaw that lets an attacker inject arbitrary web script or HTML via a specially craft...

[SECURITY] Fedora 25 Update: python-copr-1.84-1.fc25

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

[SECURITY] Fedora 26 Update: python-copr-1.84-1.fc26

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

CVE-2017-7736: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import...

PT-2017-3354

Name of the Vulnerable Software and Affected Versions FortiWebManager version 5.8.0 Description The issue is related to an improper access control in the admin webUI, allowing unauthorized access to the system using the admin account, regardless of the password provided. This can be exploited by ...

PT-2017-17917

Name of the Vulnerable Software and Affected Versions FortiWeb versions 5.8.0, 5.7.1 and earlier Description A stored Cross-site Scripting XSS issue in the webUI Certificate View page allows attackers to inject arbitrary web script or HTML via specially crafted malicious certificate imports...

Checkpoint Gaia Portal WebUI Detection

Binary data checkpointgaiawebuidetect.nbin...

[SECURITY] Fedora 27 Update: python-copr-1.84-1.fc27

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

FortiWeb Stored XSS vulnerability on webUI certificate view page

There exists a persistent Cross-site Scripting XSS vulnerability on FortiWeb's webUI Certificate View page, which can be triggered via malicious certificate import...

IBM BigFix Platform BigFix Family WebUI Component Information Disclosure Vulnerability

IBM BigFix platform is IBM's dynamic integrated messaging content-driven and management system for multi-technology platforms. BigFix Family WebUI is one of the Web management interface. A security vulnerability exists in the BigFix Family WebUI component of IBM BigFix Platform 9.2.6 and earlier...

Design/Logic Flaw

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

CVE-2017-12460

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

CVE-2017-12460

Barco ClickShare CSM-1 firmware prior to 1.7.0.3 and CSC-1 firmware prior to 1.10.0.10 are affected. An authenticated user can manage the wallpaper collection via the webUI and, by uploading a wallpaper with a specially crafted name, trigger HTML injection due to non-neutralized output. Impact is...

CVE-2017-12460: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

PT-2017-12560

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSM-1 versions prior to 1.7.0.3 Barco ClickShare CSC-1 versions prior to 1.10.0.10 Description An issue allows an authenticated user to trigger an HTML injection by uploading a wallpaper with a specially crafted name to the...

CVE-2017-7733: Improper Neutralization of Input During Web Page Generation

A Cross-Site-Scripting XSS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI "Login Disclaimer" redir parameter...

Command injection

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests...

CVE-2017-7341

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests...

CVE-2017-7341

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests...