1363 matches found
CVE-2022-39817
Affected product: NOKIA 1350 OMS (R14.2). Vulnerability: Multiple SQL Injection flaws in the system, exploitable by an authenticated attacker who can inject arbitrary SQL to alter query syntax and perform unauthorized operations on the remote database. The issues are present in specific API endpo...
CVE-2022-39819
In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system...
CVE-2022-39819
CVE-2022-39819 affects NOKIA 1350 OMS R14.2, with OS command injection vulnerabilities that allow authenticated users to execute OS commands. The connected PT-2022-25013 entry provides concrete technical details: the issue occurs via the /cgi-bin/R14.2/log.pl endpoint (cmd parameter) and the /cgi...
CVE-2022-39821
CVE-2022-39821 affects Nokia 1350 OMS R14.2. The issue is an insertion of sensitive information into an application log file, resulting in cleartext credentials being stored in world-readable files in the filesystem. The Nokia 1350 OMS web interface/logs under /usr/Systems/OTNE 1 14 Master/mainte...
CVE-2022-39821
In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem...
NOKIA 1350 OMS 操作系统命令注入漏洞
NOKIA 1350 OMS is an optical management system from Nokia Finland. An operating system command injection vulnerability exists in NOKIA 1350 OMS version R14.2 that originates from allowing an unauthenticated user to execute commands on the operating system...
PT-2022-25015 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem. This issue occurs under the /usr/Systems/OTNE 1 14...
NOKIA 1350 OMS 安全漏洞
NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2, which originates from the presence of a plaintext administrator password in the Edit Configuration page...
NOKIA 1350 OMS SQL注入漏洞
NOKIA 1350 OMS is an optical management system from Nokia Finland. A SQL injection vulnerability exists in NOKIA 1350 OMS version R14.2, which can be exploited by an attacker to inject arbitrary SQL statements, modify query syntax and perform unauthorized operations on a remote database...
PT-2022-25013 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue allows authenticated users to execute commands on the operating system due to multiple OS Command Injection vulnerabilities. These vulnerabilities occur in the /cgi-bin/R14.2/log.pl endpoint...
NOKIA 1350 OMS 输入验证错误漏洞
NOKIA 1350 OMS is an optical management system from NOKIA, Finland. A security vulnerability exists in NOKIA 1350 OMS version R14.2, which originates from a login page containing an open redirect via the next HTTP GET parameter...
NOKIA 1350 OMS 日志信息泄露漏洞
NOKIA 1350 OMS is an optical management system from Nokia Finland. A log information disclosure vulnerability exists in NOKIA 1350 OMS version R14.2, which arises from the insertion of sensitive information into an application log file, where a web application stores critical information in a...
PT-2022-25010 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue is related to multiple OS Command Injection vulnerabilities. These vulnerabilities allow unauthenticated users to execute commands on the operating system. The vulnerabilities occur via...
NOKIA 1350 OMS 操作系统命令注入漏洞
NOKIA 1350 OMS is an optical management system from Nokia Finland. An operating system command injection vulnerability exists in NOKIA 1350 OMS version R14.2 that originates from allowing an unauthenticated user to execute commands on the operating system...
PT-2022-25011 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue involves insufficiently protected credentials, specifically a cleartext administrator password, found on the edit configuration page. This can be exploited by an authenticated attacker. The...
PT-2022-25012 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue involves multiple SQL Injection vulnerabilities. These vulnerabilities can be exploited by an authenticated attacker, who can inject arbitrary SQL statements to modify query syntax and perfo...
PT-2022-25009 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: An Open Redirect issue occurs on the login page via the next HTTP GET parameter. Recommendations: For NOKIA 1350 OMS version R14.2, consider restricting access to the login page or validating the next...
Nokia BTS TRS Web Console Authentication Bypass (CVE-2021-31932)
An authentication bypass vulnerability exists in Nokia BTS TRS Web Console. Successful exploitation of this vulnerability would allow remote attacker to obtain sensitive information and gain unauthorized access into the affected system...
Android Security Bulletin—August 2022Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
