8193 matches found
CVE-2024-37665
An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request...
CVE-2024-37665
An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request...
CVE-2024-37036
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set...
CVE-2024-37036
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set...
CVE-2024-37036
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set...
CVE-2024-37665
An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request...
WEB VIDEO PLATFORM Security Vulnerabilities
WEB VIDEO PLATFORM is a WVP-PRO open source out-of-the-box web video platform implemented based on the GB28181-2016 standard. A security vulnerability exists in WEB VIDEO PLATFORM GB28181 Pro version 2.0, which stems from an access control issue that allows an authenticated attacker to elevate...
CVE-2024-37665
CVE-2024-37665 affects WVP GB28181 Pro 2.0. An access-control flaw lets authenticated attackers escalate privileges to Administrator via a crafted POST request. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and required privileges Low. No exploitation details ...
PT-2024-4206 · Schneider Electric · Schneider Electric Sage
Name of the Vulnerable Software and Affected Versions: Schneider Electric Sage affected versions not specified Description: The issue is related to a buffer overflow in memory, which could allow a remote attacker to bypass authentication by sending a specially crafted POST request and setting...
CVE-2024-5785
Command injection vulnerability in Comtrend router WLD71-T1v2.0.201820, affecting the GRG-4280us version. This vulnerability could allow an authenticated user to execute commands inside the router by making a POST request to the URL “/boaform/admin/formUserTracert”...
CVE-2024-5785 Command injection vulnerability in Comtrend router
Command injection vulnerability in Comtrend router WLD71-T1v2.0.201820, affecting the GRG-4280us version. This vulnerability could allow an authenticated user to execute commands inside the router by making a POST request to the URL “/boaform/admin/formUserTracert”...
CVE-2024-5785 Command injection vulnerability in Comtrend router
Command injection vulnerability in Comtrend router WLD71-T1v2.0.201820, affecting the GRG-4280us version. This vulnerability could allow an authenticated user to execute commands inside the router by making a POST request to the URL “/boaform/admin/formUserTracert”...
CVE-2024-5785
CVE-2024-5785 refers to a command-injection vulnerability in the Comtrend router WLD71-T1_v2.0.201820, affecting the GRG-4280us version. The issue can allow an authenticated user to execute commands inside the device by sending a POST to /boaform/admin/formUserTracert. CVSSv3.1 vector: AV:A/AC:L/...
Comtrend router WLD71-T1 Operating System Command Injection Vulnerability
Comtrend router WLD71-T1 is a router from China Comtrend Telecom Comtrend. An operating system command injection vulnerability exists in the Comtrend Router WLD71-T1 v2.0.201820 version, which stems from susceptibility to command injection and could allow an authenticated user to execute commands...
CVE-2024-5771
A vulnerability classified as critical was found in LabVantage LIMS 2017. This vulnerability affects unknown code of the file /labvantage/rc?command=page&page=SampleList&iframename=list of the component POST Request Handler. The manipulation of the argument param1 leads to sql injection. The atta...
CVE-2024-5771 LabVantage LIMS POST Request sql injection
A vulnerability classified as critical was found in LabVantage LIMS 2017. This vulnerability affects unknown code of the file /labvantage/rc?command=page&page=SampleList&iframename=list of the component POST Request Handler. The manipulation of the argument param1 leads to sql injection. The atta...
LabVantage Solutions LIMS SQL Injection Vulnerability
LabVantage Solutions LIMS is a laboratory letter management system from LabVantage Solutions, USA. A SQL injection vulnerability exists in LabVantage Solutions LIMS version 2017, which stems from unknown code in the component POST Request Handler, which leads to an SQL injection via the param1...
