Cisco ESA/CSMA 安全漏洞

Cisco ESA/CSMA is a software application from Cisco USA. It provides email security and content security management protection. Cisco ESA/CSMA There is a security vulnerability that can be exploited by an attacker to bypass access restrictions on data through the web-based management interface to...

F5 BIG-IP APM Resource Management Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A resource management error vulnerability exists in the BIG-IP APM, which arises from mismanagement of system resources e.g.,...

The vulnerability of the components of the Cisco Email Security Appliance, a system for email security management, and the Cisco Content Security Management Appliance, a system for content security management, as well as the Cisco Web Security Appliance, an internet gateway, allows attackers to gain unauthorized access to protected information.

The vulnerability of the components of the Cisco Email Security Appliance, the Cisco Content Security Management Appliance, and the Cisco Web Security Appliance involves a lack of authentication token requirements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-RHp44vAC)

According to its self-reported version, Cisco Content Security Management Appliance SMA is affected by a vulnerability in the authentication for the general purpose APIs due to the absence of a secure authentication token requirement when authenticating to the general purpose API. An...

Vulnerability fixed in Cisco Security Appliances

Cisco has fixed multiple vulnerabilities in Cisco Email Security Appliance, Cisco Content Security Management Appliance and Cisco Web Security Appliance. A malicious party could exploit it to obtain information about the system. Cisco has released updates to fix the vulnerability. For more...

CVE-2021-1129

A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to access general system information and...

Information Leakage Vulnerability in EMM Security Management Platform of Beijing Fingerprint Technology Co.

Ltd. business scope includes: technology development, technology transfer, technology consulting, technology services; conference services; organizing exhibitions and displays; education consulting; computer system services and so on. There is an information leakage vulnerability in the EMM...

CVE-2020-7336

Cross Site Request Forgery vulnerability in McAfee Network Security Management NSM prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in McAfee Network Security Management NSM prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request...

CVE-2020-7336

McAfee Network Security Manager (NSM) is affected by CVE-2020-7336, a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to change NSM configuration via a crafted HTTP request. Affected versions are NSM prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55. If exploited, the ...

CVE-2020-7336 Network Security Management (NSM) - Cross Site Request Forgery vulnerability

Cross Site Request Forgery vulnerability in McAfee Network Security Management NSM prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request...

Weak password vulnerability in China Telecom's Skywatch Store Camera

Skywing Watch Shop is a security business integrating camera, video recording, real-time monitoring, PTZ control, alarm and storage launched by CLP Hongxin Information Technology Co., Ltd. for companies, stores and other places that need to carry out visualization management, and through the clie...

Unspecified Vulnerability in HCL BigFix Inventory

HCL BigFix Platform is a suite of endpoint security management platform from HCL India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Inventory v10.0.2 onwards, which stems from not disabling the...

NEC ISM Client Trust Management Issue Vulnerability

NEC ISM Client is a client software from NEC Corporation that is used to manage NEC storage systems. NEC ISM Client has a trust management issue vulnerability that stems from the vulnerability of NEC ISM Client running on NEC Storage Manager or NEC Storage Manager Express to incorrect server...

F5 BIG-IP ASM 安全漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in the F5 BIG-IP ASM product, which can be exploited by an attacker who can trigger a...

Weak Password Vulnerability in FireWool Endpoint Security Management System

FireFleece Endpoint Security Management System is an enterprise version of computer security protection software. The FireWool Endpoint Security Management System has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)

Binary data wmiINTEL-SA-00391.nbin...

CVE-2020-8705

Insecure default initialization of resource in IntelR Boot Guard in IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 3.1.80 and 4.0.30, IntelR SPS versions before E504.01.04.400, E304.01.04.200, SoC-X04.00.04.200...

A vulnerability in the SonicWall Capture Security Center was allowing access to the managed firewall without authentication

A vulnerability in the SonicWall Capture Security Center - Cloud Security Management Service was allowing users to access managed firewalls without authentication, this issue has been resolved and a security patch has been pushed out to all affected Capture Security Center - Management and...

McAfee File and Removable Media Protection < 5.3.0.143 Arbitrary Code Execution Vulnerability (SB10330)

The version of McAfee File and Removable Media Protection installed on the remote host is prior to 5.3.0.143. It is, therefore, affected by an arbitrary code execution vulnerability which allows local users to execute arbitrary code, with higher privileges. C Tenable Network Security, Inc...