7050 matches found
CVE-2022-23031
On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity XXE vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall Advanced WAF and BIG-IP ASM Traffic Management User Interface...
CVE-2022-23031
On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity XXE vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall Advanced WAF and BIG-IP ASM Traffic Management User Interface...
Cross site scripting
Fresenius Kabi Vigilant Software Suite Mastermed Dashboard version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions...
CVE-2021-33848 Fresenius Kabi Agilia Connect Infusion System cross site scripting
Fresenius Kabi Vigilant Software Suite Mastermed Dashboard version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions...
F5 BIG-IP XML External Entity Injection Vulnerability (CNVD-2022-70618)
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP is vulnerable to XML external entity injection, which can be exploited by an authenticated and highly privileged...
PT-2022-2190
Name of the Vulnerable Software and Affected Versions Oracle Communications Billing and Revenue Management versions 12.0.0.3 through 12.0.0.4 Description The issue exists due to insufficient input validation in the Connection Manager component of Oracle Communications Billing and Revenue...
PT-2022-1996
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.57 through 8.59 Description The issue exists due to insufficient input validation in the Weblogic component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain read...
PT-2022-2196
Name of the Vulnerable Software and Affected Versions Oracle Communications Operations Monitor versions 3.4, 4.2, 4.3, 4.4, 5.0 Description The issue exists due to insufficient input validation in the Mediation Engine component of Oracle Communications Operations Monitor. This allows a remote...
PT-2022-2194
Name of the Vulnerable Software and Affected Versions Oracle Communications Operations Monitor versions 3.4, 4.2, 4.3, 4.4, and 5.0 Description The vulnerability exists in the Mediation Engine component of Oracle Communications Operations Monitor due to insufficient input validation. This allows ...
PT-2022-1997
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.57 through 8.59 Description The issue exists due to insufficient input validation in the Optimization Framework component of Oracle PeopleSoft Enterprise PeopleTools. This allows a remote attacker t...
OpenBMCS 2.4 Remote File Inclusion / Server-Side Request Forgery
OpenBMCS 2.4 Unauthenticated SSRF / RFI Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our...
OpenBMCS 2.4 Cross Site Request Forgery Vulnerability
OpenBMCS 2.4 CSRF Send E-mail Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product c...
OpenBMCS 2.4 Cross Site Request Forgery
OpenBMCS 2.4 CSRF Send E-mail Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product c...
OpenBMCS 2.4 CSRF Send E-mail
Summary Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product can control and monitor anything from a garage door to a complete campus wide network, with everything you need on...
CVE-2021-3965
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...
Code injection
Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews...
CVE-2021-3965
Technical details (affected products, impact specifics, exploitability, remediation) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2022-20658
A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...
PT-2022-5411
Name of the Vulnerable Software and Affected Versions Moxa VPORT 06EC-2V affected versions not specified Moxa VPort 461A affected versions not specified Description The issue is related to an integer overflow in the firmware of Moxa VPORT 06EC-2V IP cameras and Moxa VPort 461A video encoders...
Engine.Io code-related vulnerabilities
Engine.Io is a transport-based implementation of the cross-browser/cross-device bi-directional communication layer of Socket. A code issue vulnerability exists in Engine.IO that stems from the product's failure to effectively handle exceptions raised by special HTTP requests. An attacker could us...