8164 matches found
Additional Supply Chain Vulnerabilities Uncovered in AMI MegaRAC BMC Software
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller BMC software, nearly two months after three security vulnerabilities were brought to light in the same product. Firmware security firm Eclypsium said the two shortcomings were held back until n...
CVE-2022-45782
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...
dotCMS 安全特征问题漏洞
dotCMS is a content management system CMS from the United States dotCMS. The system supports modules such as RSS feeds, blogs, forums, etc., and is easy to extend and build. A security signature issue vulnerability exists in dotCMS core versions 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1,...
CVE-2022-45782
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...
CVE-2022-47697
COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...
CVE-2022-47697
COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...
Design/Logic Flaw
COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...
Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N安全漏洞
The Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N is a wireless router from Shenzhen Sihai Zhonglian Network Technology Shenzhen, China. A security vulnerability exists in Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N V2.3.0.1 and earlier firmware versions, which...
CVE-2022-47697
COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...
PT-2023-15460 · Comfast · Comfast Cf-Wr623N Router
Name of the Vulnerable Software and Affected Versions: COMFAST CF-WR623N Router firmware versions V2.3.0.1 and before Description: The issue allows anyone to reset the password of the admin accounts, leading to account takeover. Recommendations: For COMFAST CF-WR623N Router firmware versions...
CVE-2022-26872
AMI Megarac Password reset interception via API...
CVE-2022-26872
AMI Megarac Password reset interception via API...
Design/Logic Flaw
AMI Megarac Password reset interception via API...
CVE-2022-26872 Password reset interception via API
AMI Megarac Password reset interception via API...
CVE-2022-26872 Password reset interception via API
AMI Megarac Password reset interception via API...
AMI MegaRAC 授权问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI Megara...
CVE-2021-21395
Magneto LTS Long Term Support is a community developed alternative to the Magento CE official releases. Versions prior to 19.4.22 and 20.0.19 are vulnerable to Cross-Site Request Forgery. The password reset form is vulnerable to CSRF between the time the reset password link is clicked and user...
CVE-2021-21395
Magneto LTS Long Term Support is a community developed alternative to the Magento CE official releases. Versions prior to 19.4.22 and 20.0.19 are vulnerable to Cross-Site Request Forgery. The password reset form is vulnerable to CSRF between the time the reset password link is clicked and user...
Cross site request forgery (csrf)
Magneto LTS Long Term Support is a community developed alternative to the Magento CE official releases. Versions prior to 19.4.22 and 20.0.19 are vulnerable to Cross-Site Request Forgery. The password reset form is vulnerable to CSRF between the time the reset password link is clicked and user...
CVE-2021-21395 Magneto-lts vulnerable to Cross-Site Request Forgery
Magneto LTS Long Term Support is a community developed alternative to the Magento CE official releases. Versions prior to 19.4.22 and 20.0.19 are vulnerable to Cross-Site Request Forgery. The password reset form is vulnerable to CSRF between the time the reset password link is clicked and user...