Lucene search
+L

357 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/09 12:0 a.m.7 views

The vulnerability of the FortiADC application delivery controller web interface allows a hacker to execute arbitrary commands.

The vulnerability of the FortiADC application delivery controller web interface exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary commands by...

9CVSS8.2AI score0.02891EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.13 views

The vulnerability of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller) and the Citrix Gateway access control system (formerly Citrix NetScaler Gateway) allows a perpetrator to execute arbitrary code.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway is related to insufficient resource control during its existence. Exploiting this...

10CVSS8.5AI score0.06875EPSS
SaveExploits1References3Affected Software2
CNNVD
CNNVD
added 2022/12/13 12:0 a.m.12 views

Citrix Systems Citrix Gateway 和 Citrix ADC 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

9.8CVSS9.2AI score0.06875EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2022/12/13 12:0 a.m.5 views

VulnCheck KEV: CVE-2022-27518

Citrix Application Delivery Controller ADC and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator...

9.8CVSS7.6AI score0.06875EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/12/08 12:0 a.m.44 views

Fortinet FortiADC SQL Injection Vulnerability (CNVD-2023-02484)

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC is vulnerable to SQL injection, which stems from the use of special elements that are not neutralized and can be exploited by an attacker to execute unauthorized code or send commands via specially craft...

8.8CVSS1.7AI score0.00732EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/16 8:15 p.m.39 views

CVE-2022-39383

KubeVela is an open source application delivery platform. Users using the VelaUX APIServer could be affected by this vulnerability. When using Helm Chart as the component delivery method, the request address of the warehouse is not restricted, and there is a blind SSRF vulnerability. Users who're...

6.5CVSS0.00376EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/16 12:0 a.m.30 views

F5 BIG-IP 命令注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP. An attacker can bypass the restrictions of F5 BIG-IP via iControl REST to elevat...

8.7CVSS8.2AI score0.62406EPSS
SaveExploits8References6
CNNVD
CNNVD
added 2022/11/16 12:0 a.m.44 views

F5 BIG-IP 跨站请求伪造漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP. An attacker exploited the vulnerability to perform cross-site request forgery via iControl SOAP...

8.8CVSS8AI score0.87987EPSS
SaveExploits7References6
BDU FSTEC
BDU FSTEC
added 2022/11/14 12:0 a.m.9 views

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), relates to bypassing authentication procedures by using an alternative path or channel. This allows attackers to increase their privileges.

The vulnerability of the Citrix ADC application delivery controller previously called Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system previously called Citrix NetScaler Gateway relates to bypassing authentication procedures by using an alternative pat...

10CVSS8AI score0.01231EPSS
SaveExploits1References2Affected Software2
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.6 views

Citrix Gateway和Citrix ADC 数据伪造问题漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

9.6CVSS8.7AI score0.00275EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.7 views

Citrix Gateway和Citrix ADC 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

9.8CVSS8.7AI score0.00599EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/09/09 12:0 a.m.39 views

Fortinet FortiADC Licensing Issue Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC is vulnerable to an authorization issue, which stems from improper privilege management. An attacker could exploit the vulnerability to modify system files using a shell...

6.5CVSS3.4AI score0.0046EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/10 8:10 a.m.97 views

CVE-2022-20869

CVE-2022-20869 affects Cisco BroadWorks Application Delivery Platform Software, specifically its web-based management interface. The vulnerability is a cross-site scripting flaw caused by insufficient input validation, allowing an unauthenticated, remote attacker to persuade a user to click a cra...

6.1CVSS6.2AI score0.00555EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:0 a.m.8 views

The vulnerability in the web interface of Cisco BroadWorks Application Delivery Platform allows a attacker to perform XSS attacks.

The vulnerability in the web interface of the Cisco BroadWorks Application Delivery Platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00555EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2022/08/03 12:0 a.m.46 views

F5 BIG-IP Health Check Configuration Elevation of Privilege Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An elevation of privilege vulnerability exists in the F5 BIG-IP health check configuration, which can be exploited by an...

7.2CVSS2.2AI score0.00775EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/08/03 12:0 a.m.6 views

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP HTTP2 profile, which stems from the fact that when configuring the...

7.5CVSS5.8AI score0.00681EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/08/03 12:0 a.m.54 views

F5 BIG-IP and BIG-IQ AWS Input Validation Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An input authentication error vulnerability exists in F5 BIG-IP and BIG-IQ AWS, which can be exploited by unauthenticated...

7.5CVSS5.4AI score0.0064EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/29 12:0 a.m.18 views

SQL Injection Vulnerability in Deepsix AD Application Delivery Reporting System

DeepSign Technology Corporation is a provider of products, services and solutions focused on enterprise-class security, cloud computing and infrastructure. A SQL injection vulnerability exists in the DeepService AD Application Delivery Reporting System, which can be exploited by attackers to obta...

7.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.8 views

The vulnerability of the Citrix Application Delivery Management (ADM) platform’s management service, related to access control deficiencies, allows a hacker to bypass the administrator password and increase their privileges.

The vulnerability of the Citrix Application Delivery Management ADM delivery management platform is related to lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to bypass the administrator’s password and gain increased privileges...

8.1CVSS7.6AI score0.12325EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.8 views

The vulnerability of the Citrix Application Delivery Management (ADM) delivery service lies in the insufficient control over resources during its existence. This allows a malicious actor to cause a temporary interruption of the ADM licensing service.

The vulnerability of the Citrix Application Delivery Management ADM delivery management service is related to insufficient control over resources during its existence. Exploiting this vulnerability could allow a malicious actor to cause a temporary disruption in the ADM licensing service’s...

5.3CVSS6.5AI score0.00928EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder