20340 matches found
CVE-2025-6265
A path traversal vulnerability in the fileupload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10ACGE.2 and earlier could allow an authenticated attacker with administrator privileges to access specific directories and delete files, such as the configuration file, on the affected device...
CVE-2025-6265
CVE-2025-6265 affects Zyxel NWA50AX PRO firmware versions 7.10(ACGE.2) and earlier. A path traversal vulnerability exists in the file_upload-cgi CGI program that could allow an authenticated administrator to access certain directories and delete files (e.g., the configuration file) on the device....
CVE-2025-6265
A path traversal vulnerability in the fileupload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10ACGE.2 and earlier could allow an authenticated attacker with administrator privileges to access specific directories and delete files, such as the configuration file, on the affected device...
PT-2025-29534 · Zyxel · Zyxel Nwa50Ax Pro
Name of the Vulnerable Software and Affected Versions: Zyxel NWA50AX PRO firmware versions 7.10ACGE.2 and earlier Description: A path traversal vulnerability exists in the file upload-cgi CGI program. This could allow an authenticated attacker with administrator privileges to access specific...
Panda Security多款产品 代码问题漏洞
Panda Security Antivirus and others are products of the Spanish company Panda Security.Panda Security Antivirus is a suite of antivirus programs.Panda Security Internet Security is a suite of cloud-based antivirus programs. Panda Security Free Antivirus is a free antivirus program. A security...
CVE-2025-52363
Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access...
CVE-2025-52363
Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access...
CVE-2024-26293
The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS...
CVE-2024-26293
CVE-2024-26293 affects Avid NEXIS products via a vulnerable gSOAP v2.8 instance, enabling Unauthenticated Path Traversal. Impacted are Avid NEXIS E-series, F-series, PRO+ and System Director Appliance (SDA+) versions prior to 2025.5.1. Descriptions across NVD/Red Hat/CVELIST and related sources c...
PT-2025-29501
Name of the Vulnerable Software and Affected Versions: Tenda CP3 Pro firmware version 22.5.4.93 Description: The Tenda CP3 Pro firmware contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack...
CVE-2025-52363
Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access...
Avid多款产品 安全漏洞
Avid NEXIS E-series, among others, is a virtualized storage platform from Avid, USA. A security vulnerability exists in various Avid products, which stems from a vulnerability that could lead to an arbitrary file deletion attack. The following products and versions are affected: Avid NEXIS...
Avid多款产品 安全漏洞
Avid NEXIS E-series, among others, is a virtualized storage platform from Avid, USA. A security vulnerability exists in various Avid products that stems from the use of a vulnerable version of gSOAP, which could lead to an unauthenticated path traversal attack. The following products and versions...
CVE-2025-52363
The CVE-2025-52363 entry concerns the Tenda CP3 Pro firmware (V22.5.4.93) which contains a hardcoded root password hash in /etc/passwd and /etc/passwd-. An attacker with access to the firmware image can extract the hash and attempt to crack it, potentially gaining administrative access. Connected...
CVE-2025-52363
Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Junk...
AXIS多款产品 安全漏洞
AXIS Camera Station and others are products of the Swedish company Axis.AXIS Camera Station is a powerful and flexible video management and access control.AXIS Camera Station Pro is a powerful and flexible video management and access control.AXIS Device Manager is AXIS Device Manager is a device...