Intel In-Band Manageability Security Vulnerability

Intel In-Band Manageability is a software from Intel Corporation USA. It helps to manage individual devices and uses extensions to allow control of multiple nodes through Intel Architecture hosts. A security vulnerability exists in the Intel In-Band Manageability software. An attacker exploiting...

kernel: Linux kernel: Denial of Service in UFS subsystem

A flaw was found in the Linux kernel's Universal Flash Storage UFS subsystem. A local attacker with low privileges could trigger a vulnerability during the handling of UFS device management command timeouts. If a command times out and its doorbell fails to clear, a subsequent completion can lead ...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which is caused by an Unrestricted File Upload Local Privileg...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from an incorrect default privilege allowing local...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets, and barcode scanners. A security vulnerability exists in Ivanti Avalanche that stems from a lack of authentication local privilege...

Ivanti Avalanche security breach

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche, which stems from a lack of authentication local lifting...

The vulnerability of the addDv7Probe function in the D-View 8 network device management platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the addDv7Probe function in the D-View 8 network device management platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Avalanche device management system, related to incorrect restrictions on the path name to the restricted access catalog, allows a hacker to execute arbitrary code.

The vulnerability of the Avalanche device management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network switches, and FortiADC application delivery controller allows a perpetrator to execute arbitrary commands.

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network monitoring devices, and FortiADC application delivery controller is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allow...

The vulnerability of Fortinet FortiManager’s centralized device management system lies in the insufficient checking of arguments passed in commands, allowing an attacker to execute arbitrary commands or code.

The vulnerability of Fortinet FortiManager’s centralized device management system lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands or code...

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and FortiAnalyzer devices lies in the implementation of security functions at the client side. This allows a malicious actor to gain privileged access.

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and the network firewall FortiAnalyzer is related to the implementation of security functions at the client side. Exploiting this vulnerability can allow a malicious actor to gain privileged access...

The software’s vulnerability regarding centralized device management by Fortinet FortiManager and the FortiAnalyzer network firewall, related to an error in processing user-controlled authentication keys, allows a perpetrator to access confidential data.

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and FortiAnalyzer lies in a processing error related to authentication keys, which are controlled by users. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

CVE-2023-41679

An improper access control vulnerability CWE-284 in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device management" permission on his profile and...

Improper access control

An improper access control vulnerability CWE-284 in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device management" permission on his profile and...

Fortinet FortiManager Security Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different administrative domains ADOMs to further simplify multi-device security deployme...

The vulnerability of the Weincloud industrial device management cloud platform lies in its insufficient authentication attempt limit, which allows attackers to execute a brute-force attack.

The vulnerability of the Weincloud industrial device management cloud platform lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack...

The vulnerability of the Weincloud industrial device management cloud platform lies in improper handling of its components, allowing attackers to trigger a service failure.

The vulnerability of the Weincloud industrial device management cloud platform is related to incorrect handling of its components. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the dumpHeap method in the Avalanche mobile device management system allows a hacker to escalate their privileges.

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the AcSELerator QuickSet SEL-5030 device management tool, related to incomplete filtering of certain elements, allows a perpetrator to execute arbitrary codes.

The vulnerability of the device for controlling energy system components, AcSELerator QuickSet SEL-5030, is related to incomplete filtering of certain elements. Exploiting this vulnerability could allow an intruder to execute arbitrary code...

Design/Logic Flaw

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...