Archive
5 March 2018
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 4.6
Cross site scripting attacks against NetIQ Privileged Account Manager
NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "account" parameters of json requests.
-
Medium 5.4
iManager - Multiple Reflected Cross-Site Scripting attacks
Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Identity Manager 4.6.1. In certain scenarios it was possible to execute arbitrary JavaScript code in the context of vulnerable application, vi…
-
Medium —
vrana/adminer vulnerable to SSRF by connecting to privileged ports
Adminer through 4.3.1 has SSRF via the server parameter.