EUVD-2023-48209

Malicious code in bioql PyPI...

CVE-2024-9929

A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

CVE-2019-1815

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper...

CVE-2023-43846

Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote attackers to get the device logs via HTTP GET request. The logs contain such information as user names and IP addresses used in the infrastructure. This information may help the...

CVE-2024-3046

In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an...

CVE-2024-9929

A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps...

CVE-2024-9929

A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps...

CVE-2024-9929

CVE-2024-9929 affects Hitachi Energy NSD570. The connected sources describe a vulnerability where any authenticated user can access all device logs, exposing login timestamps. Impact is limited to information disclosure of logs; no exploitation details or CVSS-specific vectors are provided beyond...

CVE-2024-9929

A vulnerability exists in NSD570 that allows any authenticated user to access all device logs disclosing login information with timestamps...

PT-2024-39944 · Nsd570 · Nsd570

Name of the Vulnerable Software and Affected Versions: NSD570 affected versions not specified Description: A security issue exists that allows any authenticated user to access all device logs, revealing login information with timestamps. Recommendations: At the moment, there is no information abo...

Hitachi Energy NSD570 安全漏洞

The Hitachi Energy NSD570 is a remote protection device from Hitachi, Ltd Hitachi, Japan. It is designed to provide simple commissioning, operation and monitoring of remote protection links. A security vulnerability exists in the Hitachi Energy NSD570 that originates from allowing any authenticat...

GHSA-V7W9-63XH-6R3W LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php

Summary A Reflected Cross-Site Scripting XSS vulnerability in the "section" parameter of the "logs" tab of a device allows attackers to inject arbitrary JavaScript. This vulnerability results in the execution of malicious code when a user accesses the page with a malicious "section" parameter,...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. LibreNMS suffers from a cross-site scripting vulnerability that stems from a reflected...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

PT-2024-27004 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 devices affected versions not specified Description: The issue allows an unauthenticated attacker to gain access to device logs through the cgi-bin/fdmcgiwebv2.cgi endpoint on Swissphone DiCal-RED 4009 devices...

CVE-2024-36444

CVE-2024-36444 affects Swissphone DiCal-RED 4009 devices. The issue is exposed via the endpoint cgi-bin/fdmcgiwebv2.cgi , enabling an unauthenticated attacker to access device logs. Multiple sources classify this as an authentication issue (Imporper Authentication/CWE-287) and note the vendor has...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

CVE-2023-43846

Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote attackers to get the device logs via HTTP GET request. The logs contain such information as user names and IP addresses used in the infrastructure. This information may help the...