2259 matches found
Cisco Firepower Device Manager On-Box Input Validation Error Vulnerability
Cisco Firepower Device Manager FDM is a firewall device manager from Cisco USA. The product supports access rule configuration, system monitoring, etc. Cisco Firepower Device Manager On-Box software is one of the built-in software. An input validation error vulnerability exists in Cisco FDM On-Bo...
ABB MicroSCADA Pro SYS600 Access Control Error Vulnerability
ABB MicroSCADA Pro SYS600 is a suite of monitoring and data acquisition software from ABB Switzerland. The software is used for substation automation, SCADA electrical, distribution management applications and industrial power management. An access control error vulnerability exists in ABB...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags. Remediation Upgrade re2c to version 2.0.3 or higher. References - GitHub Issue...
CVE-2020-3955
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base sco...
Ivanti Avalanche SQL Injection Vulnerability
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A SQL injection vulnerability exists in Ivanti Avalanche version 6.3. The vulnerability stems from a lack of...
LCDS LAquis SCADA Input Validation Error Vulnerability
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An input validation error vulnerability exists in LCDS LAquis SCADA version...
AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)
AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...
Schneider Electric Tricon TCM Model Resource Management Error Vulnerability
Schneider Electric Tricon TCM Model 4351 and others are a communication module from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Tricon TCM Model v10.3.x version and v10.4.x version. An attacker could exploit the vulnerability to reset the TCM module...
CVE-2020-7486
VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this...
Broadcom CA API Developer Portal Information Disclosure Vulnerability
Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An information disclosure vulnerability exists in Broadcom CA API Developer Portal...
Intel Data Migration Software Elevation of Privilege Vulnerability
Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...
CVE-2019-20664
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...
CVE-2019-20660
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...
Dell EMC XtremIO XMS Cross-Site Scripting Vulnerability
Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A cross-site scripting vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...
Dell EMC XtremIO XMS Information Disclosure Vulnerability
Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. An information disclosure vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from an error in the configuration, etc. of a networked system or produ...
SilverStripe Cross-Site Request Forgery Vulnerability (CNVD-2020-10710)
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site request forgery vulnerability exists in SilverStripe 4.3.3 and earlier...
HTTP Response Splitting
Overview org.wso2.transport.http:org.wso2.transport.http.netty is a HTTP protocol handling implementations for C5 based products. Affected versions of this package are vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. Remediation Upgrade...
EyesOfNetwork Arbitrary OS Command Execution Vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as business process configuration tools, generating pop-up windows when events occur in the active queue, and more. An arbitrary OS command execution vulnerability exists in EyesOfNetwork 5.3,...
AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...