| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-12720 | Hig | 0.49 | 7.5 | 0.02 | Nov 12, 2019 | AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picture_manage_mvc.aspx… | ||
| CVE-2019-12719 | Cri | 0.64 | 9.8 | 0.02 | Nov 12, 2019 | An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter. | ||
| CVE-2019-0721 | Cri | 0.60 | 9.1 | 0.12 | Nov 12, 2019 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719. | ||
| CVE-2019-0719 | Cri | 0.60 | 9.1 | 0.11 | Nov 12, 2019 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721. | ||
| CVE-2019-0712 | Med | 0.45 | 6.8 | 0.06 | Nov 12, 2019 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1309,… | ||
| CVE-2010-3359 | Med | 0.31 | 4.8 | 0.00 | Nov 12, 2019 | If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account. | ||
| CVE-2019-17360 | Hig | 0.49 | 7.5 | 0.01 | Nov 12, 2019 | A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption. | ||
| CVE-2019-15815 | Med | 0.42 | 6.5 | 0.01 | Nov 12, 2019 | ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and could allow an unauthorized user to access certain pages that require admin privileges. | ||
| CVE-2018-21026 | Hig | 0.49 | 7.5 | 0.01 | Nov 12, 2019 | A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information. | ||
| CVE-2019-18926 | Med | 0.40 | 6.1 | 0.01 | Nov 12, 2019 | Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack… | ||
| CVE-2019-18925 | Cri | 0.64 | 9.8 | 0.01 | Nov 12, 2019 | Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication. | ||
| CVE-2019-18924 | Med | 0.35 | 5.3 | 0.01 | Nov 12, 2019 | Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists. | ||
| CVE-2019-18655 | Cri | 0.65 | 9.8 | 0.15 | Nov 12, 2019 | File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the… | ||
| CVE-2019-17237 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2019 | includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF. | ||
| CVE-2019-17236 | Med | 0.40 | 6.1 | 0.01 | Nov 12, 2019 | includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS. | ||
| CVE-2019-17235 | Med | 0.35 | 5.3 | 0.01 | Nov 12, 2019 | includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure. | ||
| CVE-2019-17234 | Hig | 0.49 | 7.5 | 0.03 | Nov 12, 2019 | includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion. | ||
| CVE-2012-1572 | Hig | 0.49 | 7.5 | 0.01 | Nov 12, 2019 | OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space | ||
| CVE-2019-4652 | Hig | 0.46 | 7.1 | 0.00 | Nov 12, 2019 | IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963. | ||
| CVE-2019-18848 | Hig | 0.42 | 7.5 | 0.01 | Nov 12, 2019 | The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. | ||
| CVE-2012-1109 | Hig | 0.42 | 7.5 | 0.02 | Nov 12, 2019 | mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions | ||
| CVE-2011-3618 | Hig | 0.51 | 7.8 | 0.00 | Nov 12, 2019 | atop: symlink attack possible due to insecure tempfile handling | ||
| CVE-2019-18817 | Hig | 0.42 | 7.5 | 0.01 | Nov 12, 2019 | Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836. | ||
| CVE-2019-18658 | Cri | 0.64 | 9.8 | 0.02 | Nov 12, 2019 | In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as… | ||
| CVE-2018-18819 | Med | 0.35 | 5.3 | 0.01 | Nov 12, 2019 | A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1… | ||
| CVE-2014-7143 | Hig | 0.42 | 7.5 | 0.03 | Nov 12, 2019 | Python Twisted 14.0 trustRoot is not respected in HTTP client | ||
| CVE-2014-3599 | Med | 0.35 | 6.5 | 0.01 | Nov 12, 2019 | HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy | ||
| CVE-2011-5271 | Med | 0.36 | 5.5 | 0.00 | Nov 12, 2019 | Pacemaker before 1.1.6 configure script creates temporary files insecurely | ||
| CVE-2011-3370 | Med | 0.40 | 6.1 | 0.01 | Nov 12, 2019 | statusnet before 0.9.9 has XSS | ||
| CVE-2011-2936 | Cri | 0.64 | 9.8 | 0.02 | Nov 12, 2019 | Elgg through 1.7.10 has a SQL injection vulnerability | ||
| CVE-2011-2935 | Med | 0.33 | 6.1 | 0.01 | Nov 12, 2019 | Elgg through 1.7.10 has XSS | ||
| CVE-2011-2897 | Cri | 0.64 | 9.8 | 0.02 | Nov 12, 2019 | gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw | ||
| CVE-2019-18882 | — | Med | 0.40 | 6.1 | 0.01 | Nov 12, 2019 | WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled. | |
| CVE-2019-18881 | — | Med | 0.40 | 6.1 | 0.01 | Nov 12, 2019 | WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile. | |
| CVE-2019-18874 | Hig | 0.42 | 7.5 | 0.04 | Nov 12, 2019 | psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object. | ||
| CVE-2019-18873 | Cri | 0.62 | 9.0 | 0.08 | Nov 12, 2019 | FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the control… | ||
| CVE-2019-18862 | Hig | 0.54 | 7.8 | 0.01 | Nov 11, 2019 | maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. | ||
| CVE-2019-18857 | Hig | 0.42 | 7.5 | 0.01 | Nov 11, 2019 | darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript :alert substring. | ||
| CVE-2019-18856 | Hig | 0.49 | 7.5 | 0.01 | Nov 11, 2019 | A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access to external resources with an SVG use element is mishandled. | ||
| CVE-2019-18855 | Hig | 0.49 | 7.5 | 0.03 | Nov 11, 2019 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes. | ||
| CVE-2019-18854 | Hig | 0.49 | 7.5 | 0.03 | Nov 11, 2019 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring. | ||
| CVE-2019-18853 | Med | 0.35 | 6.5 | 0.01 | Nov 11, 2019 | ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2. | ||
| CVE-2019-18852 | Cri | 0.64 | 9.8 | 0.02 | Nov 11, 2019 | Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01,… | ||
| CVE-2019-18849 | Med | 0.29 | 5.5 | 0.01 | Nov 11, 2019 | In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup. | ||
| CVE-2019-18841 | Hig | 0.41 | 7.3 | 0.01 | Nov 11, 2019 | Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution. | ||
| CVE-2019-18836 | Hig | 0.49 | 7.5 | 0.02 | Nov 11, 2019 | Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used." | ||
| CVE-2019-18845 | Hig | 0.46 | 7.1 | 0.00 | Nov 9, 2019 | The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling… | ||
| CVE-2019-18840 | Hig | 0.49 | 7.5 | 0.02 | Nov 9, 2019 | In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the… | ||
| CVE-2009-5004 | Med | 0.42 | 6.5 | 0.03 | Nov 9, 2019 | qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use . | ||
| CVE-2009-4011 | Hig | 0.53 | 8.1 | 0.01 | Nov 9, 2019 | dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console. |
- risk 0.49cvss 7.5epss 0.02
AUO SunVeillance Monitoring System before v1.1.9e is vulnerable to mvc_send_mail.aspx (MailAdd parameter) SQL Injection. An Attacker can carry a SQL Injection payload to the server, allowing the attacker to read privileged data. This also affects the picture_manage_mvc.aspx…
- risk 0.64cvss 9.8epss 0.02
An issue was discovered in Picture_Manage_mvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter.
- risk 0.60cvss 9.1epss 0.12
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0719.
- risk 0.60cvss 9.1epss 0.11
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0721.
- risk 0.45cvss 6.8epss 0.06
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1309,…
- risk 0.31cvss 4.8epss 0.00
If LD_LIBRARY_PATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account.
- risk 0.49cvss 7.5epss 0.01
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.7.0-00 allows an unauthenticated remote user to trigger a denial of service (DoS) condition because of Uncontrolled Resource Consumption.
- risk 0.42cvss 6.5epss 0.01
ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly enforce access control and could allow an unauthorized user to access certain pages that require admin privileges.
- risk 0.49cvss 7.5epss 0.01
A vulnerability in Hitachi Command Suite 7.x and 8.x before 8.6.5-00 allows an unauthenticated remote user to read internal information.
- risk 0.40cvss 6.1epss 0.01
Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack…
- risk 0.64cvss 9.8epss 0.01
Systematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of authentication.
- risk 0.35cvss 5.3epss 0.01
Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.
- risk 0.65cvss 9.8epss 0.15
File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the…
- risk 0.57cvss 8.8epss 0.01
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
- risk 0.40cvss 6.1epss 0.01
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.
- risk 0.35cvss 5.3epss 0.01
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.
- risk 0.49cvss 7.5epss 0.03
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.
- risk 0.49cvss 7.5epss 0.01
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space
- risk 0.46cvss 7.1epss 0.00
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.
- risk 0.42cvss 7.5epss 0.01
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
- risk 0.42cvss 7.5epss 0.02
mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions
- risk 0.51cvss 7.8epss 0.00
atop: symlink attack possible due to insecure tempfile handling
- risk 0.42cvss 7.5epss 0.01
Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836.
- risk 0.64cvss 9.8epss 0.02
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service (DoS) via a special file such as…
- risk 0.35cvss 5.3epss 0.01
A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1…
- risk 0.42cvss 7.5epss 0.03
Python Twisted 14.0 trustRoot is not respected in HTTP client
- risk 0.35cvss 6.5epss 0.01
HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy
- risk 0.36cvss 5.5epss 0.00
Pacemaker before 1.1.6 configure script creates temporary files insecurely
- risk 0.40cvss 6.1epss 0.01
statusnet before 0.9.9 has XSS
- risk 0.64cvss 9.8epss 0.02
Elgg through 1.7.10 has a SQL injection vulnerability
- risk 0.33cvss 6.1epss 0.01
Elgg through 1.7.10 has XSS
- risk 0.64cvss 9.8epss 0.02
gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw
- risk 0.40cvss 6.1epss 0.01
WSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is mishandled.
- risk 0.40cvss 6.1epss 0.01
WSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile.
- risk 0.42cvss 7.5epss 0.04
psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
- risk 0.62cvss 9.0epss 0.08
FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the control…
- risk 0.54cvss 7.8epss 0.01
maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode.
- risk 0.42cvss 7.5epss 0.01
darylldoyle svg-sanitizer before 0.12.0 mishandles script and data values in attributes, as demonstrated by unexpected whitespace such as in the javascript :alert substring.
- risk 0.49cvss 7.5epss 0.01
A Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for Drupal because access to external resources with an SVG use element is mishandled.
- risk 0.49cvss 7.5epss 0.03
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes.
- risk 0.49cvss 7.5epss 0.03
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring.
- risk 0.35cvss 6.5epss 0.01
ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.
- risk 0.64cvss 9.8epss 0.02
Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/image_sign or /etc/alpha_config/image_sign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 (for DCN), DIR-645 A1 v1.03, DIR-815 A1 v1.01,…
- risk 0.29cvss 5.5epss 0.01
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.
- risk 0.41cvss 7.3epss 0.01
Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.
- risk 0.49cvss 7.5epss 0.02
Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used."
- risk 0.46cvss 7.1epss 0.00
The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling…
- risk 0.49cvss 7.5epss 0.02
In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the…
- risk 0.42cvss 6.5epss 0.03
qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .
- risk 0.53cvss 8.1epss 0.01
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console.