5935 matches found
CVE-2020-11772
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10...
PT-2020-10128 · Siemens · Scalance Xr324-4M Poe +46
Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT SCALANCE X201-3P IRT SCALANCE X201-3P IRT PRO SCALANCE X202-2IRT SCALANCE X202-2P IRT SCALANCE X202-2P IRT PRO SCALANCE X204-2 SCALANCE X204-2FM SCALANCE X204-2LD SCALANCE X204-2LD TS SCALANCE X204-2TS SCALANCE X204IRT...
Unspecified Vulnerability in KUKA Sim Pro
KUKA Sim Pro is a simulation and machine programming software. A security vulnerability exists in KUKA Sim Pro, which can be exploited by an attacker to cause loss of integrity of external 3D models obtained from a remote server...
ICSA-20-098-05_KUKA.Sim Pro
1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: KUKA Equipment: Sim Pro Vulnerability: Improper Enforcement of Message Integrity During Transmission in a Communication Channel 2. RISK EVALUATION Successful exploitation of this vulnerability...
CVE-2020-11465
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/ endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including applications used as user sources used for...
CVE-2020-11456: Improper Neutralization of Input During Web Page Generation
LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php aka survey groups...
March 2020 -- Akamai Edge Security: Leader in Five Forrester Wave Reports
Forrester has named Akamai a Leader in five different Wave and New Wave reports. This significant achievement reflects the strength of Akamai's intelligent edge platform for securing and delivering digital experiences across our entire security portfolio. Forrester Wave Leaders are the top vendor...
Multiple Lexmark Product Information Disclosure Vulnerabilities (CNVD-2020-41824)
Lexmark X, etc. are all products of Lexmark Corporation, U.S.A. The Lexmark X is an X-series printer.The Lexmark W is a W-series printer.The Lexmark T is a T-series printer. An information disclosure vulnerability exists in a number of Lexmark products, which can be exploited to obtain sensitive...
Cisco Small Business Router DoS
The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests...
CVE-2019-9104
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext...
CVE-2019-9102
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery CSRF protection...
CVE-2019-9096
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing accoun...
CVE-2020-10190
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
PT-2020-11963
Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 5.3.0 Description An issue allows an authenticated user to achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the "datatables/data" endpoint. Recommendations For versions prior to...
CVE-2020-10190: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
Command injection
Multiple ZyXEL network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using th...
Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-20202)
Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The SDM630 is a central processing unit CPU product. A buffer overflow vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...
CVE-2020-9015
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices and possibly other products allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly...