12625 matches found
CVE-2016-4869
CVE-2016-4869 (Cybozu Office) : Cybozu Office versions 9.0.0–10.4.0 contain an information disclosure vulnerability where a page displaying CGI environment variables can leak session information. An unauthenticated remote attacker may obtain a user’s session data via that page. The issue’s impact...
CVE-2016-4869
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
PT-2017-8566
Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.0.0 through 10.4.0 Description The issue allows remote attackers to obtain session information via a page where CGI environment variables are displayed. Recommendations For Cybozu Office versions 9.0.0 through 10.4.0,...
CVE-2016-4869: Exposure of Sensitive Information to an Unauthorized Actor
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
cgi.com XSS vulnerability
Vulnerable URL: https://www.cgi.com/en/media-announcement/2015;alert'OPENBUGBOUNTY'; Details: Description| Value ---|--- Patched:| Yes, at 21.04.2017 Latest check for patch:| 21.04.2017 08:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35900 VIP website...
Schneider Electric homeLYnk Controller Detection
Detection of Schneider Electric homeLYnk Controller The script sends a connection request to the server and attempts to detect Schneider Electric homeLYnk Controller and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...
Directory traversal
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...
CVE-2017-7461
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...
CVE-2017-7461
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...
CVE-2017-7462
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...
Directory traversal
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...
CVE-2017-7462
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...
CVE-2017-7462: Improper Limitation of a Pathname to a Restricted Directory
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...
Linksys Wireless-G PTZ Access Sensitive Files Vulnerability
Exploit for hardware platform in category web applications Also sold by Cisco, this device, which can be found on ZoomEye here: https://www.zoomeye.org/search?q=Basic%20realm%3D%22Authorization%22%20Boa/0.94.13%20port%3A80&p=4&t=host has a vulnerability in which you can read some sensitive files ...
CVE-2017-7461: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...
IDS VSE IP Camera - Authenticated Remote Code Execution Vulnerability
The ctrl.cgi script on the device's webserver that runs as root is vulnerable to remote command execution by an authenticated user, with the default password being "admin:admin". The sntpip GET parameter is fed to the command line by the CGI script without sanitization for semicolons, allowing an...
Anybus Modbus Gateway - Authenticated Directory Traversal Vulnerability
The cgi-bin/read.cgi CGI script in the cgi-bin folder on the devices webserver is vulnerable to directly traversal by directly including any file. It typically includes files from the /home/httpd/jjs directoy but you can access files outside of the main webserver directory. There's 67 of these...
PT-2017-17754
Name of the Vulnerable Software and Affected Versions Intellinet NFC-30ir IP Camera affected versions not specified Description The issue concerns a vendor backdoor that allows a remote attacker to access a vendor-supplied CGI script in the web directory. Recommendations At the moment, there is n...
CVE-2016-6534
Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...