7177 matches found
CVE-2023-20101
Cisco Emergency Responder is affected by a vulnerability where an unauthenticated attacker can log in via the root account that uses default, static credentials. The issue comes from static root credentials that cannot be changed or deleted, enabling the attacker to log in and execute arbitrary c...
Cisco Emergency Responder Static Credentials Vulnerability
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for th...
Cisco Emergency Responder 信任管理问题漏洞
Cisco Emergency Responder is an emergency response framework from Cisco USA. A trust management issue vulnerability exists in Cisco Emergency Responder version 12.51SU4, which arises from the presence of static user credentials for the root account, which are typically used during development, an...
PT-2023-5675 · Cisco · Cisco Emergency Responder
Name of the Vulnerable Software and Affected Versions: Cisco Emergency Responder affected versions not specified Description: The issue is related to the presence of static user credentials for the root account in Cisco Emergency Responder, which are typically reserved for use during development...
@anfo/difftool (>=0.0.1, <=0.0.11), @bdefore/nivo-patterned-radial-arc (0.79.1) +125 more potentially affected by CVE-2023-26152 via static-server (>=2.0.0, <=2.2.1)
static-server NPM version =2.0.0, =0.0.1, =0.0.1, =2.0.0-beta.1, =0.1.21, =0.5.0, =0.0.1, =2.59.1-alpha.1, =1.1.0, =3.0.3, =0.1.10, =1.0.0, =1.0.2 and more Source cves: CVE-2023-26152 Source advisory: OSV:GHSA-V834-RHV4-65M3...
static-server Path Traversal vulnerability
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...
GHSA-V834-RHV4-65M3 static-server Path Traversal vulnerability
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...
CVE-2023-26152
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...
CVE-2023-26152
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js...
CVE-2023-26152
CVE-2023-26152 affects the static-server package. The vulnerability stems from improper input sanitization in the validPath function of server.js, enabling Directory Traversal to access files outside the intended directory. Exploitation details, affected versions, and remediation are not provided...
static-server path traversal vulnerability
statics-server is a server used to collect information about the environment in which Joomla is installed. A path traversal vulnerability exists in statics-server, which stems from improperly cleaned input passed via the validPath function of server.js, making it susceptible to directory traversa...
Malicious code in n-common-static-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c17f4dab236eeb1c55ab41ae1a96d282e4752ab3eee194cf73869f3354554b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8276 Malicious code in n-common-static-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c17f4dab236eeb1c55ab41ae1a96d282e4752ab3eee194cf73869f3354554b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.
The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures taken to neutralize special elements during the processing of request parameters. Exploiting this vulnerability could allow a remote attacker to...
CVE-2023-20034
Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerability is due to the presen...
PT-2023-5690 · Cisco · Cisco Sd-Wan Vmanage
Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage affected versions not specified Description: The issue is related to insufficient access controls in the Elasticsearch database used by Cisco SD-WAN vManage software. This could allow an unauthenticated, remote attacker t...
The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.
The vulnerability of the SetHostIPv6StaticSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster relates to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the D-View 8 network device management platform, which stems from the use of rigidly encrypted user credentials, allows a malicious actor to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the D-View 8 network device management platform lies in the use of a static key during the processing of JWT tokens. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...
Mobile Security Framework Security Vulnerability
Mobile Security Framework MobSF is Mobile Security Framework open source an automated all-in-one mobile application . Used for penetration testing, malware analysis and security assessments, it is capable of performing both static and dynamic analysis. A security vulnerability exists in Mobile...
