152 matches found
CVE-2021-27446
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system...
Cross site scripting
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code...
Improper access control
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator...
Code injection
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system...
CVE-2021-27446 Weintek EasyWeb cMT Code Injection
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system...
CVE-2021-27446 Weintek EasyWeb cMT Code Injection
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system...
CVE-2021-27446
CVE-2021-27446 affects Weintek EasyWeb cMT line with Code Injection vulnerability allowing an unauthenticated remote attacker to execute commands with root privileges. Affected components: Weintek cMT product family; root cause described as improper generation of code (CWE-94) enabling code injec...
CVE-2021-27444 Weintek EasyWeb cMT Improper Access Control
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator...
CVE-2021-27444
The CVE-2021-27444 issue affects Weintek EasyWeb cMT product line, arising from improper access controls that allow an unauthenticated remote attacker to access sensitive data and perform administrative actions as a legitimate administrator. The CVE is documented with a high/critical impact (CVSS...
CVE-2021-27442 Weintek EasyWeb cMT Cross-site Scripting
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code...
CVE-2021-27442 Weintek EasyWeb cMT Cross-site Scripting
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code...
CVE-2021-27442
The CVE-2021-27442 entry describes a cross-site scripting vulnerability in Weintek EasyWeb cMT (Weintek cMT product line). The issue is triggered in cross-site scripting during web page generation, allowing an unauthenticated remote attacker to inject JavaScript. Affected products include cMT mod...
CVE-2021-27446: Improper Control of Generation of Code
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system...
CVE-2021-27444: Improper Access Control
The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator...
PT-2022-9823
Name of the Vulnerable Software and Affected Versions Weintek cMT affected versions not specified Description The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perfo...
PT-2022-9822
Name of the Vulnerable Software and Affected Versions Weintek cMT affected versions not specified Description The issue concerns a cross-site scripting vulnerability that could allow an unauthenticated remote attacker to inject malicious JavaScript code. Recommendations At the moment, there is no...
CVE-2021-27442: Improper Neutralization of Input During Web Page Generation
The Weintek cMT product line is vulnerable to a cross-site scripting vulnerability, which could allow an unauthenticated remote attacker to inject malicious JavaScript code...
PT-2022-9824
Name of the Vulnerable Software and Affected Versions Weintek cMT affected versions not specified Description The issue allows an unauthenticated remote attacker to execute commands with root privileges on the operation system due to code injection. Recommendations At the moment, there is no...
intel-cmt-cat bug fix and enhancement update
An update is available for intel-cmt-cat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
