CVE-2023-20077

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

Cisco Small Business 安全漏洞

Cisco Small Business is a switch from Cisco. A security vulnerability exists in Cisco Small Business Series Switches that stems from multiple vulnerabilities in the web-based user interface. An unauthenticated, remote attacker could exploit this vulnerability to cause a denial of service DoS or...

The vulnerability of the configuration saving function in the web interface of D-Link DWL-2600AP wireless access points allows a intruder to execute arbitrary commands.

The vulnerability of the configuration saving function in D-Link DWL-2600AP wireless access points related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the commands admin.cgi?action=configsave and downloadServerip. Exploiting this...

CVE-2023-30510

A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possib...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to perform cross-site scripting attacks.

The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists because measures are not taken to protect the structure of the web page when processing the argument smtpServer.fromAddr. Exploiting this vulnerability allows a malicious actor to perform cross-site...

CVE-2023-31164

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

Schweitzer Engineering Laboratories Real Time Automation Controller 跨站脚本漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in the Schweitzer Engineering Laboratories Real Time Automation Controller that originates from...

PT-2023-23189 · Schweitzer Engineering Laboratories · Sel Rtac

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC affected versions not specified Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue in the SEL RTAC Web Interfac...

PT-2023-23188 · Schweitzer Engineering Laboratories · Sel Rtac

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC affected versions not specified Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue in the SEL RTAC Web Interfac...

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers is related to insufficient protection of the web page structure when processing the Login.userAgent parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripti...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP...

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers allows attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 microprogramming software routers is related to insufficient protection of the web page structure when processing the USERDBUsers.Password argument. Exploiting this vulnerability allows a malicious actor to perform cross-site...

Schweitzer Engineering Laboratories Real Time Automation Controller 跨站脚本漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in the Schweitzer Engineering Laboratories Real Time Automation Controller that originates from...

Schweitzer Engineering Laboratories Real Time Automation Controller 输入验证错误漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC that originates fr...

Schweitzer Engineering Laboratories Real Time Automation Controller 输入验证错误漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC that originates fr...

Schweitzer Engineering Laboratories Real Time Automation Controller 跨站脚本漏洞

Schweitzer Engineering Laboratories Real Time Automation Controller SEL RTAC is a powerful and versatile automation platform from Schweitzer Engineering Laboratories. A security vulnerability exists in the Schweitzer Engineering Laboratories Real Time Automation Controller that originates from...

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

The vulnerability of the web interface of the microprogramming software for the Distribution Power Unit (PDU) Aten PE8108, which allows a hacker to gain access to the account data via Telnet and SNMP.

The vulnerability of the web interface of the microprogramming software for the Distribution Processing Unit PDU Aten PE8108 is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the registration data...

CVE-2023-29926

PowerJob V4.3.2 has unauthorized interface that causes remote code execution...

PT-2023-2608 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability exists in the Web Management Interface of the Netgear SRX5308, affecting the file scgi-bin/platform.cgi?page=dmz setup.htm. The issue arises from insufficient input validatio...