474 matches found
Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability
The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to gain unauthorized access to /systemlog.tar.gz to obtain information such as /etc/shadow and...
PT-2020-15003
Name of the Vulnerable Software and Affected Versions SEOWON INTECH SLC-130 and SLR-120S devices affected versions not specified Description The issue allows for Remote Code Execution via the ipAddr parameter to the "system log.cgi" page. This enables an attacker to execute arbitrary code on the...
Windows GDI Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
The vulnerability of the system log processing mechanism of the Cisco Identity Services Engine (ISE) platform allows a perpetrator to trigger a service failure.
The vulnerability of the system log processing mechanism of the Cisco Identity Services Engine ISE management platform is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...
Input validation
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
CVE-2020-3307 Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...
Inadequate Logging
tog-pegasus does not log authentication attempts. Failed authentication attempts against the OpenPegasus CIM server were not logged to the system log as documented in README.RedHat.Security. An attacker could use this flaw to perform password guessing attacks against a user account without leavin...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...
Design/Logic Flaw
Contao before 4.5.7 has XSS in the system log...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...
CVE-2018-10125
The CVE-2018-10125 entry describes a Cross-site Scripting (XSS) vulnerability in Contao before version 4.5.7, specifically in the system log. The root cause appears to be insufficient validation of client-side data in the web application, enabling an attacker to inject malicious scripts that may ...
CVE-2018-10125
Contao before 4.5.7 has XSS in the system log...
PT-2020-8512
Name of the Vulnerable Software and Affected Versions: Contao versions prior to 4.5.7 Description: The issue is related to Cross-Site Scripting XSS in the system log. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...
CVE-2018-10125: Improper Neutralization of Input During Web Page Generation
Contao before 4.5.7 has XSS in the system log...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
