2293 matches found
CVE-2022-23663
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...
Command injection
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...
Aruba ClearPass Policy Manager 操作系统命令注入漏洞
Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A remote command injection vulnerability exists in the web management interface of Aruba ClearPass Policy Manager versions 6.10.4 and earlier, 6.9.9 and earlier, a...
Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...
MikroTik RouterOS 代码问题漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in MikroTik RouterOS versions prior to 6.48.2 stable that stems from a memory...
Cisco Small Business RV Series Routers 操作系统命令注入漏洞
The Cisco Small Business RV Series Routers is an RV Series router from Cisco. The Cisco Small Business RV340 and RV345 Routers are vulnerable to an operating system command injection vulnerability that arises from insufficient validation of user-supplied input in the web-based management interfac...
CVE-2022-20628
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...
CVE-2022-20629
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...
Cisco Firepower Management Center代码问题漏洞
Cisco Firepower Management Center FMC is a next-generation firewall management center software from Cisco, which is vulnerable to a code issue that could be exploited by an authenticated remote attacker to bypass security protections and upload malicious A remote, authenticated attacker could...
Sql injection
Sed Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context...
PT-2022-13923 · Hestiacp · Hestiacp
Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.5.12 Description: The issue allows an authenticated remote attacker with low privileges to execute arbitrary code under root context. This is due to a command injection vulnerability in the GitHub...
CVE-2022-20628
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...
Cisco Firepower Management Center 跨站脚本漏洞
A cross-site scripting vulnerability exists in Cisco Firepower Management Center FMC, a next-generation firewall management center software from Cisco. The vulnerability stems from a Web management interface that does not adequately authenticate user input. An authenticated remote attacker could...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following products: Database - Enterprise Edition Database Configuration Assistant Spatial and Graph Application Express APEX The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage:...
Vulnerability fixed in Veritas NetBackup OpsCenter and OpsCenter Analytics
A vulnerability has been fixed in Veritas NetBackup OpsCenter and OpsCenter Analytics. The vulnerability allows an authenticated remote malicious person able to perform Cross-Site ScriptingXSS. execution. Veritas has made mitigation measures and updates available to fix the vulnerability. For mor...
CVE-2022-20693
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...
CVE-2022-20697
The CVE-2022-20697 issue affects Cisco IOS Software and Cisco IOS XE Software web services. The vulnerability stems from improper resource management in the HTTP server code, enabling an authenticated, remote attacker to trigger a DoS by sending a large volume of HTTP requests, which can cause th...
PT-2022-4325 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This...