3289 matches found
CVE-2021-26622
An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...
CVE-2021-26622 Genian NAC remote code execution vulnerability
An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...
CVE-2021-26622
Consolidated details from multiple sources confirm CVE-2021-26622 affects Genian NAC. The vulnerability stems from a Server-Side Template Injection (SSTI) and insufficient validation of the file name parameter, enabling remote attackers to execute arbitrary code with SYSTEM privileges on all conn...
CVE-2021-33961
A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...
CVE-2021-33961
A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...
CVE-2021-33961
A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...
Cross site scripting
A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...
CVE-2021-33961
A Cross Site Scripting XSS vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter...
enhanced-github跨站脚本漏洞
enhanced-github is a browser extension that adds useful functionality to the GitHub website by Varun Malhotra, an individual developer in India. A security vulnerability exists in enhanced-github version 5.0.11, which stems from a cross-site scripting XSS vulnerability in the file name parameter ...
CVE-2021-45787
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to stored cross-site scripting. The vulnerability exists in the parameter Name when saving Grid Options because a content security policy is not handled properly which allows a malicious attacker to inject and execute arbitrary javascript...
CVE-2022-27005
Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2022-26211
Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...
PT-2022-17726 · Totolink · Totolink A3100R +5
Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...
Pimcore 跨站脚本漏洞
Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.4.0 before the version there is ...
PT-2022-17724 · Totolink · Totolink A810R +5
Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...
ARRIS TR3300 命令注入漏洞
ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the hostname parameter in the dhcp function to properly filter the construct command special characters, commands, etc. An attacker could use this...
CVE-2022-25550
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the deviceName parameter...