6 matches found
CVE-2025-21589
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device. This issue affects Session Smart Router: from 5.6.7 before 5.6.17, from...
CVE-2025-9798 Stored XSS in Netcad Software's Netigma
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netcad Software Inc. Netigma allows Stored XSS. This issue affects Netigma: from 6.3.3 before 6.3.5 V8...
CVE-2022-36339
Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...
CVE-2022-0633
creationtimestamp| type| source ---|---|--- 2022-02-21 17:11:04+00:00| seen| https://t.me/truesecator/2655...
PT-2021-23550 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.3.3 Description: An improper authorization control issue exists, allowing an attacker with access to the Inforail Service to perform privilege escalation. Recommendations: For versions prior to 6.3.3, upda...
Stored XSS Cross-Site Scripting Vulnerability in Ocean CMS Version 6.33
Ocean CMS is an open source website builder. A stored XSS cross-site scripting vulnerability exists in Ocean CMS version 6.33. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...