Skip to content
OpenAdvisories

Archive

5 March 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.6

    Cross site scripting attacks against NetIQ Privileged Account Manager

    NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests.

  • Medium 5.4

    iManager - Multiple Reflected Cross-Site Scripting attacks

    Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, vi…

  • Medium —

    vrana/adminer vulnerable to SSRF by connecting to privileged ports

    Adminer through 4.3.1 has SSRF via the server parameter.