14 matches found
CVE-2026-26207
creationtimestamp| type| source ---|---|--- 2026-02-26 19:38:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrx3v37zi2v...
CVE-2022-26207
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the...
CVE-2020-26207
DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted .dbschema file. The patch was released in v2.7.4.3. As a workaround, ensure .dbschema files from untrusted sources are not opened...
CVE-2024-26207
Windows Remote Access Connection Manager Information Disclosure Vulnerability...
CVE-2024-26207
Windows Remote Access Connection Manager Information Disclosure Vulnerability...
Fortinet FortiProxy - SMTP password ciphertext exposure in Log (FG-IR-22-455)
The version of FortiProxy installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-455 advisory. - An insertion of sensitive information into log file vulnerability CWE-532 in FortiOS / FortiProxy log events may allow a...
CVE-2023-26207
CVE-2023-26207 recap (Fortinet) : A vulnerability in Fortinet FortiOS (7.2.0–7.2.4) and FortiProxy (7.0.0–7.0.10) allows an attacker to insert sensitive information into log files, enabling reading of certain passwords in plaintext. The problem is tied to log logging behavior rather than remote e...
CVE-2023-26207
An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text...
Fortinet Fortigate - SMTP password ciphertext exposure in Log (FG-IR-22-455)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-455 advisory. - An insertion of sensitive information into log file vulnerability CWE-532 in FortiOS / FortiProxy log events may allow a...
TOTOLINK Routers Command Injection (CVE-2022-26206; CVE-2022-26207; CVE-2022-26208; CVE-2022-26209; CVE-2022-26211; CVE-2022-26212; CVE-2022-26214; CVE-2022-27003; CVE-2022-27004; CVE-2022-27005; CVE-2022-28935)
A command injection vulnerability exists in TOTOLINK Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2022-26207
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the...
CVE-2020-26207
creationtimestamp| type| source ---|---|--- 2020-11-05 00:42:45+00:00| seen| https://t.me/cibsecurity/15850...
CVE-2020-26207 Unsafe deserialization in DatabaseSchemaViewer
DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted .dbschema file. The patch was released in v2.7.4.3. As a workaround, ensure .dbschema files from untrusted sources are not opened...
CVE-2020-26207
DatabaseSchemaViewer is affected by CVE-2020-26207: versions before 2.7.4.3 allow arbitrary code execution when a user opens a crafted .dbschema file. Root cause is unsafe deserialization triggered by loading the malicious file. The vendor patch is available in v2.7.4.3. As a workaround, avoid op...