GLPI SQL Injection Vulnerability (CNVD-2020-67239)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

Cisco IOS XE Information Disclosure and Denial of Service Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An information disclosure and denial of service vulnerability exists in the Web management framework of Cisco IOS XE. An attacker could exploit this vulnerability to gain...

CVE-2020-3475 Cisco IOS XE Software Web Management Framework Vulnerabilities

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service DoS...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...

PAN-OS: OS command injection vulnerability in the management web interface

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. Work around: Until PAN-OS software is upgraded to a fixed version, enabling signatures for Unique Threat ID 59971 on traffic...

Cisco Patches 'High-Severity' Bugs Impacting Switches, Fibre Storage

Cisco Systems disclosed eight high-severity bugs impacting a range of its networking gear, including its switches and fiber storage solutions. Cisco’s NX-OS was hardest hit, with six security alerts tied to the network operating system that underpins the networking giant’s Nexus-series Ethernet...

Design/Logic Flaw

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485 Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485 Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

CVE-2020-3485

CVE-2020-3485 describes a vulnerability in the web management software of Cisco Vision Dynamic Signage Director’s RBAC. The issue arises from improper handling of RBAC in the web interface, enabling an authenticated, remote attacker to view and delete screen content they should not access via a c...

Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Zendo open source version of the existence of arbitrary file read vulnerability

Zendo Open Source Edition is a research and development project management software. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Zendo Open Source Edition There is an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Cisco SD-WAN vManage Software Backlink Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A back-link vulnerability exists in the web management interface in Cisco SD-WAN vManage Software versions prior to 19.2.3, which stems from the program's failure to adequate...

Authentication flaw

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

Cross site scripting

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

Tendenci Code Issue Vulnerability

Tendenci is an association management software primarily for nonprofit organizations and associations from Tendenci USA. The software supports features such as membership management, content management, event management and online donation management. A code issue vulnerability exists in the...

CVE-2020-3229

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

CVE-2020-3229

CVE-2020-3229 affects Cisco IOS XE Web UI RBAC: an incorrect RBAC handling in the admin GUI may allow a Read-Only authenticated attacker to execute commands or configuration changes as Admin by sending a modified HTTP request. Root cause: RBAC handling flaw in the Web UI. Affected product family:...

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

NOKIA VitalSuite SPM 2020 SQL Injection

Exploit Title: NOKIA VitalSuite SPM 2020 - 'UserName' SQL Injection Exploit Author: Berk Dusunur Google Dork: N/A Type: Web App Date: 2020-05-28 Vendor Homepage: https://www.nokia.com Software Link: https://www.nokia.com/networks/products/vitalsuite-performance-management-software/ Affected...