3088 matches found
CVE-2014-5329
GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...
Race condition
GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...
PT-2023-6648 · Unknown · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions 7.17.13 and 8.9.2 Description: Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. However, it was found that this filtering was not applied when requests to...
GHSA-P7V2-P9M8-QQG7 Electron context isolation bypass via nested unserializable return value
Impact Apps using contextIsolation and contextBridge are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Workarounds This issue is exploitable under eithe...
CVE-2023-28567
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28564
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...
Memory corruption
Memory corruption in WLAN HAL while handling command through WMI interfaces...
Memory corruption
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...
CVE-2023-28567 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28567 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28567
CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...
CVE-2023-28565 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command streams through WMI interfaces...
CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces...
WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API
PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...
PT-2023-21792 · Qualcomm · Snapdragon +184
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in WLAN when sending a transmit command from HLOS to UTF handlers. No information is provided about the estimated...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to carry out a cross-site scripting attack.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software relates to insufficient data cleaning provided by users. Exploiting this vulnerability allows a malicious actor to carry out XSS attack...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM), allows a attacker to execute XSS attacks and execute arbitrary code.
The vulnerability affects the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services. Exploiting this vulnerability allows a remote attacker to execute XSS attacks and...
The vulnerability of the Web interface for managing Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to gain access to read or modify data in the database.
The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME web interfaces is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to gain read or...
CVE-2023-20201
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...