The vulnerability of the software interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure or cause the device to restart.

The vulnerability of the Cisco Meeting Server software interface is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger a system restart and cause service failure...

The vulnerability in the web interface of the server software for Cisco Prime Access Registrar allows a attacker to execute arbitrary code or gain access to protected information via a browser.

The vulnerability of the server software’s web interface for ensuring scalability and extensibility in Cisco Prime Access Registrar is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or...

Huawei Smartphone 权限许可和访问控制问题漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. An incorrect privilege control vulnerability exists in Huawei Emui and Magic UI. An attacker could use the vulnerability to obtain certain device information...

Aom 代码问题漏洞

Aom is a next-generation open-source digital media technology for everyone organized by the Alliance For Open Media AOM. A security vulnerability exists in AOM version 2.0.1, which stems from the presence of a dereferenced NULL pointer in component av1/av1dxiface.c. The vulnerability is caused by...

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTPS request from a remo...

yamaha 部分产品 信息泄露漏洞

Yamaha NVR500 and others are products of Yamaha Corporation, Japan.Yamaha NVR500 is an Enterprise Router.Yamaha RTX810 is a Gigabit VPN Virtual Private Network Router.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a...

Huawei Emui 注入漏洞

Huawei Emui is a mobile operating system developed on Android.Magic Ui is a mobile operating system developed on Android.An injection attack vulnerability exists in Huawei Emui and Magic UI. An attacker can exploit this vulnerability to affect service availability...

The vulnerability in the software web interface of F-Secure Internet Gatekeeper allows a hacker to trigger a service failure.

The vulnerability of the F-Secure Internet Gatekeeper software’s web interface relates to the use of the assert function or similar operators when processing user name parameters. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted HT...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network administration allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Firepower Management Center FMC software network interface relates to incorrect checking of input parameters for HTTP requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems is related to insufficient cleaning of input data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Schneider Electric Eurotherm by Schneider Electric GUIcon 缓冲区错误漏洞

Schneider Electric Eurotherm by Schneider Electric GUIcon is a graphical user interface programming software from Schneider Electric France. Schneider Electric GUIcon suffers from a buffer overflow vulnerability that originates when a malicious .gd1 configuration file is loaded into the GUIcon...

CVE-2021-34731

A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently...

The vulnerability of the web-based network interface of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD web-based network interface services is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CommScope Arris Surfboard Sb8200 跨站请求伪造漏洞

The CommScope Arris Surfboard Sb8200 is a Docsis 3.1 modem from CommScope USA. The Arris Surfboard SB8200 suffers from a security vulnerability that stems from the lack of any protection against cross-site request forgery attacks in the software's administrative web interface. This means that an...

The vulnerability of the VPN gateway web interface for corporate networks, Pulse Connect Secure, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VPN gateway web interface for corporate networks in Pulse Connect Secure is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

The software’s vulnerability involves providing a web interface for accessing GNU Mailman v3 archives and interacting with Hyperkitty lists. This vulnerability allows an attacker to gain access to confidential data.

The vulnerability of the software that provides a web interface for accessing GNU Mailman v3 archives and interacting with Hyperkitty lists is related to an error during the import of private distribution list archives, which later became publicly accessible. Exploiting this vulnerability could...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

IBM Jazz for Service Management和IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...