14198 matches found
CVE-2021-23162
Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions...
CVE-2021-23162
The CVE-2021-23162 entry applies to Gallagher Command Centre Mobile Connect for Android, affecting versions before 15.04.040 and version 14 and earlier. The root cause is improper validation of the cloud certificate chain, enabling a man-in-the-middle attack to impersonate the legitimate Command ...
Gallagher Command Centre Server 信任管理问题漏洞
A security vulnerability exists in Gallagher Command Centre Server, a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. The vulnerability stems from incorrect validation of the cloud certificate chain in Mobile Connect, which could be exploited by ...
OpenID Connect Microsoft Azure Active Directory client - Moderately critical - Access Bypass - SA-CONTRIB-2021-044
This module enables users to authenticate through their Microsoft Azure AD account. The module does not sufficiently check authorization before updating user profile information in certain non-default configurations. This could lead a user being able to hijack another existing account. This...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology used by IBM WebSphere Cast Iron Solution & App Connect Professional. These issues were disclosed as part of the IBM Java SDK updates in July 2021, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the...
The vulnerability in the web interface of the Pulse Connect Secure VPN server for corporate networks allows a perpetrator to execute arbitrary code.
The vulnerability in the web interface of VPN servers for corporate networks provided by Pulse Connect Secure relates to the unlimited download of files with the .gzip extension. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2021-23162
Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions...
Zoho ManageEngine Patch Connect Plus Remote Code Execution Vulnerability
Zoho ManageEngine Patch Connect Plus is a tool that leverages existing Microsoft System Center Configuration Manager servers to help deploy patches to over 250 third-party applications e.g., Adobe applications, Java and WinRAR. A remote code execution vulnerability exists in Zoho ManageEngine Pat...
Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11, V12 (CVE-2021-2369)
Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Integration Bus & IBM App Connect Enterprise v11, V12. These issues were disclosed as part of the IBM Java SDK updates in July 2021 Vulnerability Details CVEID: CVE-2021-2369 DESCRIPTION: An unspecified vulnerability in Jav...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
Remote code execution
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution...
CVE-2021-41833
Zoho ManageEngine Patch Connect Plus is affected by CVE-2021-41833. The vulnerability exists in Patch Connect Plus versions prior to 90099 and allows unauthenticated remote code execution. The CNVD entry confirms the same issue and notes exploitation by an unauthenticated attacker to achieve remo...
UBUNTU-CVE-2021-23214
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption...
Zoho ManageEngine Patch Connect Plus 代码问题漏洞
Zoho ManageEngine Patch Connect Plus is a tool that leverages existing Microsoft System Center Configuration Manager servers to help deploy patches to over 250 third-party applications e.g., Adobe applications, Java and WinRAR. A remote code execution vulnerability exists in Zoho ManageEngine Pat...
Security Bulletin: Multiple Vulnerabilities in IBM Sterling Connect:Direct Browser User Interface
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions. IBM Sterling Connect:Direct Browser User Interface has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-2388 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component...
Connect Box EuroDOCSIS 3.0 Voice Gateway 操作系统命令注入漏洞
The Connect Box EuroDOCSIS 3.0 Voice Gateway is a home voice gateway device. An operating system command injection vulnerability exists in Connect Box EuroDOCSIS 3.0 Voice Gateway that allows an attacker with privileges and network access to execute commands on the device via the ping.cmd compone...
CVE-2021-31890
A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. The total length of an TCP...