CVE-2023-30354

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access...

Hardcoded credentials

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Tenda CP3 安全漏洞

Tenda CP3 is a smart camera from Tenda, China. A security vulnerability exists in Tenda CP3 version V11.10.00.2211041355, which stems from the device not disabling physical access to the U-Boot via UART, resulting in the display of a Wi-Fi password, which can be exploited by an attacker to insert...

kernel: malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory

An out-of-bounds write flaw was found in the Linux kernel’s framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2023-31180

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

CVE-2023-31181

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31181

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

Path traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

Cross site scripting

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

Security Bulletin: IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console (CVE-2023-24966)

Summary IBM WebSphere Application Server is vulnerable to cross site scripting in the Admin Console. This has been addressed in the remediation section below. Vulnerability Details CVEID:CVE-2023-24966 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting. This...

CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

CVE-2023-31181

Affected software: WJJ Software InnoKB Server and InnoKB/Console, version 2.2.1. Issue: Path traversal (CWE-22) that allows accessing files/directories outside the intended root due to improper input handling. Documented impact aligns with high confidentiality impact per CVSS 3.1 but no exploitab...

CVE-2023-31180 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...

CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal...

PT-2023-11484 · Unknown · Bluethrust Clan Scripts

Name of the Vulnerable Software and Affected Versions: Bluethrust Clan Scripts version 4 Description: A Cross Site Request Forgery CSRF issue allows attackers to escalate privileges to an arbitrary account via a crafted request to "/members/console.php?cID=5". Recommendations: For Bluethrust Clan...

CVE-2023-31180

WJJ Software InnoKB Server/Console 2.2.1 is affected by reflected cross-site scripting (RXSS) via an unspecified request. The vulnerability is documented across multiple feeds, with CVSS v3.1 metrics indicating Networks access, Low attack complexity, and user interaction required. There is no exp...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.9 security and bug fix update

The Migration Toolkit for Containers MTC 1.7.9 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

PT-2023-14141 · Nozomi Networks · Nozomi Networks Guardian +1

Name of the Vulnerable Software and Affected Versions: Nozomi Networks Guardian and CMC affected versions not specified Description: The issue is caused by improper input validation in the Alerts controller, allowing an authenticated attacker to execute arbitrary SQL queries on the DBMS used by t...

Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2

Summary A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the Alerts controller, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application. Impact Authenticated users can extract arbitrary...