CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

Trend Micro IM Security web console suffers a weak session token authentication bypass (auth bypass via guessable tokens) affecting 1.6 and 1.6.5. An unauthenticated remote attacker can exploit the guessable tokens to bypass login and access the web management interface (web console on port 16373...

CVE-2021-31520: Improper Authentication

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

PT-2021-19402

Name of the Vulnerable Software and Affected Versions Trend Micro IM Security versions 1.6 through 1.6.5 Description A weak session token authentication bypass issue could allow a remote attacker to guess the session token of currently logged-in administrators, potentially gaining access to the...

CVE-2021-1363

CVE-2021-1363 affects Cisco Unified Communications Manager IM & Presence Service. The web-based management interface is vulnerable to SQL injection due to improper validation of user-submitted parameters. An authenticated, remote attacker can send crafted requests to the application, potentially ...

CVE-2021-1365

Cisco Unified Communications Manager IM & Presence Service web-based management interface contains SQL injection vulnerabilities caused by improper validation of user-submitted parameters. An authenticated, remote attacker can exploit these vulnerabilities by sending malicious requests to the app...

CVE-2021-1365: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

CVE-2021-1363: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

CVE-2021-1365

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted...

PT-2021-2975

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service affected versions not specified Description The issue is related to improper validation of user-submitted parameters in the web-based management interface, allowing an authenticated,...

PT-2021-3277

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service affected versions not specified Description The issue is related to improper validation of user-submitted parameters in the web-based management interface, allowing an authenticated,...

GHSA-QFXV-QQVG-24PG OS Command Injection in im-metadata

im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function...

chhyun-utils (>=1.0.12, <=1.0.39), s3-uploader (>=2.0.0-rc.1, <=2.0.3) +3 more potentially affected by CVE-2019-10788 via im-metadata (3.0.1)

im-metadata NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on im-metadata and may be impacted: - chhyun-utils =1.0.12, =2.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10788 Source advisory:...

OS Command Injection in im-metadata

im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function...

chhyun-utils (>=1.0.12, <=1.0.39), jotunheimr (>=1.11.0, <=1.12.1) +4 more potentially affected by CVE-2019-10787 via im-resize (>=2.0.2, <=2.3.2)

im-resize NPM version =2.0.2, =1.0.12, =1.11.0, =1.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10787 Source advisory: OSV:GHSA-R9VM-RHMF-7HXX...

GHSA-R9VM-RHMF-7HXX OS Command Injection in im-resize

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization...

OS Command Injection in im-resize

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization...

CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...