2056 matches found
CVE-2021-37177
The CVE-2021-37177 entry affects Siemens SINEMA Remote Connect Server (all versions before 3.0 SP2). The vulnerability allows an unauthenticated attacker on the same network to manipulate the status provided by managed syslog clients, indicating a modification of assumed-immutable data (CWE-471) ...
CVE-2021-37177: Modification of Assumed-Immutable Data (MAID)
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The status provided by the syslog clients managed by the affected software can be manipulated by an unauthenticated attacker in the same network of the affected system...
Siemens SINEMA Remote Connect Server Access Control Vulnerability
Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An access control error vulnerability exists in SINEMA Remote Connect Server, which can be exploited ...
CVE-2021-38703
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
CVE-2021-38703
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
Design/Logic Flaw
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
CVE-2021-38703
CVE-2021-38703 concerns Arcadyan-derived firmware used by devices such as KPN Experia WiFi (1.00.15). The issue arises from improper sanitisation of user input to the syslog configuration form, enabling an authenticated remote attacker to alter device configuration and achieve remote code executi...
PT-2021-22264 · Arcadyan · Arcadyan-Derived Firmware
Name of the Vulnerable Software and Affected Versions: Arcadyan-derived firmware versions affected versions not specified Description: The issue concerns improper sanitization of user input to the syslog configuration form in certain wireless devices running Arcadyan-derived firmware. This can be...
CVE-2021-38703: Undefined Security Weakness
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
SUSE-SU-2021:2771-1 Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2021-36386: DoS or information disclosure in some configurations bsc1188875 - Change PASSWORDLEN from 64 to 256 bsc1188034 - Set the hostname for SNI when using TLS bsc1182807 - Allow --syslog option in daemon mode. bsc1033081 - Set the...
CVE-2021-37439
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
Path traversal
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
CVE-2021-37439
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
CVE-2021-37439
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
NCH FlexiServer path traversal vulnerability
NCH FlexiServer is a functional time and attendance software.NCH FlexiServer has a directory traversal vulnerability, which originates from the product's syslog?file=/... Failure to filter special characters, an attacker can use this vulnerability to obtain sensitive information...
CVE-2021-37439: Improper Limitation of a Pathname to a Restricted Directory
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability...
PT-2021-21652
Name of the Vulnerable Software and Affected Versions NCH FlexiServer version 6.00 Description The issue is related to a path traversal vulnerability in the syslog component, where an attacker can potentially access files outside the intended directory by manipulating the file parameter in the...
CVE-2020-21934
An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed...