Cisco AppDynamics Controller Security Vulnerability

Cisco AppDynamics Controller is a Cisco company that monitors and analyzes full-stack data through accurate tracking and analysis across a highly distributed application environment. A security vulnerability exists in Cisco AppDynamics Controller, which stems from a vulnerability in the web-based...

Cisco AppDynamics Controller Security Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. A security vulnerability exists in Cisco AppDynamics Controller that stems from a flaw in the file upload functionalit...

Cisco Small Business Security Vulnerabilities

Cisco Small Business is a switch from Cisco. A security vulnerability exists in Cisco Small Business that stems from a flaw in the web-based management interface that could allow an authenticated, remote attacker to perform a command injection attack on an affected device...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. A security vulnerability exists in versions prior to AiLux imx6 bundle imx61.0.7-2 that stems from a dependency on externally supplied filenames or extensions, which allows an authenticated, remote attacker to upload arbitrary types of files to the...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. A security vulnerability exists in versions prior to AiLux imx6 bundle imx61.0.7-2, which stems from the unrestricted upload of dangerous types of files, allowing an authenticated, remote attacker to upload arbitrary types of files to the device...

IBM Security Guardium 操作系统命令注入漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An operating system command injection vulnerability exists ...

CVE-2024-26300

A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim...

CVE-2024-26300

A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim...

CVE-2024-26299

CVE-2024-26299 concerns Aruba/ClearPass Policy Manager’s web-based management interface. The vulnerability enables a stored cross-site scripting (XSS) attack by an authenticated remote attacker targeting an administrative user, allowing arbitrary script execution in the victim’s browser within th...

MikroTik RouterOs Out-of-bounds Write (CVE-2020-20227)

Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-o...

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows an authenticated...

PT-2024-21340 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an...

MikroTik RouterOs NULL Pointer Dereference (CVE-2020-20216)

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOs Reachable Assertion (CVE-2020-20211)

Mikrotik RouterOs 6.44.5 long-term tree suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. This plugin only works with Tenable.ot. Please visit...

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows an authenticated...

PT-2024-19387 · Unknown · Sma100 Ssl-Vpn

Name of the Vulnerable Software and Affected Versions: SMA100 SSL-VPN virtual office portal affected versions not specified Description: An improper access control issue has been identified in the SMA100 SSL-VPN virtual office portal. This issue could potentially enable a remote authenticated...

CVE-2024-26310

Archer Platform 6.8 before 6.14 P2 6.14.0.2 contains an improper access control vulnerability. A remote authenticated malicious user could potentially exploit this to gain access to API information that should only be accessible with extra privileges...

Liferay Portal and Liferay DXP Security Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

Mitsubishi Electric MELSEC iQ-R series 安全漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. The Mitsubishi Electric MELSEC iQ-R series suffers from an information disclosure vulnerability that can be exploited by an authenticated, remote attacker to log in to the product and...

Trellix Central Management Cross-Site Scripting Vulnerability

Trellix Central Management is a centralized management system from Trellix, Inc. It consolidates the management, reporting and data sharing of Trellix products into one easy-to-deploy system. A cross-site scripting vulnerability exists in Trellix Central Management prior to version 9.1.3.97129,...