4642 matches found
CVE-2013-4862
Vulnerability CVE-2013-4862 affects MiCasaVerde VeraLite firmware 1.5.408. The issue arises from improper access restrictions that enable remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh and (2) retrieve hashed passwords via the cgi-bin/cmh/back...
CVE-2013-4582
CVE-2013-4582 affects GitLab: the functions create_branch, create_tag, import_project, and fork_project in lib/gitlab_projects.rb allow remote authenticated users to include information from local files into the metadata of a Git repository via the web interface. Affected are GitLab 5.0 up to 5.4...
CVE-2014-8161
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message...
CVE-2012-6451
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...
Authentication flaw
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...
CVE-2012-6451
Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...
CVE-2012-6451
Affected products: Lorex LNC116 and LNC104 IP Cameras. Vulnerability: Remote authentication bypass due to the web interface using HTTP Basic authentication but validating credentials only on the home page; direct URL navigation bypasses login. Impact: unauthorized viewing of live video feed and p...
Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2020-03755)
Cisco Unified Communications Manager is the centerpiece of the Cisco Collaboration Platform, enabling a person to easily communicate with others via voice, video, and messaging from any device, on any operating system. An information disclosure vulnerability exists in the web-based management...
CVE-2019-10956
Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...
CVE-2019-10956
Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...
CVE-2019-10957
Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...
CVE-2019-10956
Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx, EFD-22xx, ETHC-22xx, EWPC-22xx) with firmware up to 1.12.0.25 are affected by CVE-2019-10956 via OS command injection. A remote authenticated user can send a specially crafted URL command to the device and execute commands with root pri...
CVE-2015-5071
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...
CVE-2015-5071
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...
Cisco Data Center Network Manager XML External Entity Read Access Vulnerability
Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An XML external entity read access vulnerability exists in the SOAP API of Cisco...
CVE-2020-5179
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagnostics Ping page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech password fo...
CVE-2013-4985
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...
CVE-2013-4985
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...
CVE-2013-4985
CVE-2013-4985 affects Vivotek IP cameras, enabling remote unauthenticated RTSP authentication bypass to access video streams. Core Security CoreLabs advisory CORE-2013-0704 describes exploiting RTSP basic auth bypass by sending crafted RTSP packets to port 554, tested on IP7160, IP7361, IP8332 wi...
