2891 matches found
Digital Watchdog DW MEGApixel IP cameras 操作系统命令注入漏洞
Digital Watchdog DW MEGApixel IP cameras is a series of webcam solutions from Digital Watchdog USA. An operating system command injection vulnerability exists in Digital Watchdog DW MEGApixel IP cameras version A7.2.220211029, which originates from a command injection contained in the component...
Carel pCOWeb HVAC BACnet Gateway 2.1.0 Unauthenticated Directory Traversal Vulnerability
Carel pCOWeb HVAC BACnet Gateway version 2.1.0 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the file GET parameter through the logdownload.cgi bash script is not properly verified before being used to download log files. This can be exploited to...
PT-2022-3298 · Trueconf · Trueconf Server
Name of the Vulnerable Software and Affected Versions: TrueConf Server version 4.3.7 Description: The issue is related to the failure to neutralize script-related HTML tags on a web page, which can lead to basic cross-site scripting Stored. This can be initiated remotely. The exploit has been...
HPESBST04329 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities
Potential Security Impact: Local: Disclosure of Sensitive Information; Remote: Denial of Service DoS, Disclosure of Information, Unauthorized Access to Data, Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - 2.2.x.x pri...
Information disclosure
Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...
CVE-2022-32535
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...
Privilege escalation
The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...
Design/Logic Flaw
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...
CVE-2022-32536: Improper Privilege Management
The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...
Cross site scripting
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
PT-2022-13992 · WordPress · Hc Custom Wp-Admin Url
Name of the Vulnerable Software and Affected Versions: HC Custom WP-Admin URL WordPress plugin versions 1.4 and earlier Description: The issue allows the secret login URL to be leaked when a specific crafted request is sent. Recommendations: For HC Custom WP-Admin URL WordPress plugin versions 1....
CVE-2022-29250 SQL injection in GLPI
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to version 10.0.1 it is possible to add extra information by SQL injection on search pages. In order to exploit this vulnerability a user...
PT-2022-23724 · Ivanti · Ivanti Avalanche
Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche version 6.3.2.3490 Description: This issue allows remote attackers to bypass authentication on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be...
GHSA-VRWX-Q9PJ-X488 Liferay Portal and Liferay DXP Bypass via Double Encoded URL
In Liferay Portal before 7.3.1, com.liferay.portal:com.liferay.portal.impl before 7.1.3 and 7.4.0, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs...
GHSA-2VP2-8M5J-4RJX cnlh nps vulnerable to file overwrite by local user
lib/install/install.go in cnlh nps prior to 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user...
CVE-2022-25161
CVE-2022-25161 is an Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F Series controllers (FX5U FX5UCFX5S FX5UJ CPU modules, etc.). A remote, unauthenticated attacker can trigger a denial-of-service by sending specially crafted packets to affected Ethernet communications,...
Incorrect Authorization in publify
Improper Access Control in GitHub repository publify/publify prior to 9.2.8. Anonymous users can't view but can leave comments on an article in draft mode...
GHSA-W2XF-4GG9-87WR Centreon allows SNMP trap SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...
GHSA-7R36-JF3C-JHP4 Duplicate Advisory: tgstation-server vulnerable to cached user logins in legacy server
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-42r6-p4px-qvv6. This link is maintained to preserve external references. Original Description In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 fixed in 3.2.5.0, active logins would be cached, allowing...