NetVision Information airPASS 操作系统命令注入漏洞

NetVision Information airPASS is an application from China-based NetVision Information. NetVision Information airPASS suffers from an operating system command injection vulnerability that stems from vulnerability to operating system command injection attacks, which could allow a remote attacker...

NetVision Information airPASS SQL注入漏洞

NetVision Information airPASS is an application from China-based NetVision Information. NetVision Information airPASS suffers from a SQL injection vulnerability that originates from a susceptibility to SQL injection attacks, which allows an unauthenticated, remote attacker to inject arbitrary SQL...

CVE-2025-0457: Improper Neutralization of Special Elements used in an OS Command

The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...

CVE-2024-3776

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks...

CVE-2024-3776

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks...

CVE-2024-3776 Netvision airPASS - Reflected XSS

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks...

CVE-2024-3776

CVE-2024-3776 is a reflected XSS vulnerability in Netvision airPASS login parameter handling. An unauthenticated attacker can inject JavaScript via the login parameter due to insufficient input filtering. Documented impact is cross-site scripting with potential access to user context; exploitatio...

CVE-2024-3776 Netvision airPASS - Reflected XSS

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks...

NETVISION INFORMATION airPASS 跨站脚本漏洞

NETVISION INFORMATION airPASS is a wireless network authentication management system from NETVISION INFORMATION. A cross-site scripting vulnerability exists in versions prior to NETVISION INFORMATION airPASS v2.9.0.20231006, which stems from a Reflected Cross-Site Scripting XSS vulnerability in t...

CVE-2024-3776: Improper Neutralization of Input During Web Page Generation

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks...

PT-2024-27733 · Netvision · Netvision Airpass

Name of the Vulnerable Software and Affected Versions: Netvision airPASS affected versions not specified Description: The issue concerns a reflected cross-site scripting attack. An unauthenticated remote attacker can insert JavaScript code into a parameter used in the login page, as it is not...

CVE-2023-48383

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2023-48383 NetVision Information airPASS - Path Traversal

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2023-48383: Improper Limitation of a Pathname to a Restricted Directory

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

PT-2024-13608 · Netvision +1 · Netvision +1

Name of the Vulnerable Software and Affected Versions: NetVision affected versions not specified Description: The issue is related to a path traversal vulnerability within a parameter in a specific URL of airPASS. This vulnerability can be exploited by an unauthenticated remote attacker to bypass...

CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

Information disclosure

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

CVE-2023-0356

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information...

CVE-2023-0356

CVE-2023-0356 affects SOCOMEC MODULYS GP Netvision firmware (versions up to 7.20). Root cause: weak encoding of credentials over HTTP connections (CWE-261), enabling potential disclosure of sensitive information. Affected product: MODULYS GP Netvision; vulnerability details are consistent across ...