2847 matches found
CVE-2023-39808
N.V.K.INTER CO., LTD. NVK iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $1$4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerability discoverer...
N.V.K.INTER iBSG 信任管理问题漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which stems from the presence of a hard-coded root password that allows an attacker to log in with root privileges via SSH service...
PT-2023-27115 · N.V.K.Inter Co. · Ibsg
Name of the Vulnerable Software and Affected Versions: N.V.K.INTER CO., LTD. NVK iBSG version 3.5 Description: The issue is related to a hardcoded root password in the software, which allows attackers to login with root privileges via the SSH service. Recommendations: For version 3.5, consider...
N.V.K.INTER iBSG SQL注入漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which originates from a SQL injection vulnerability in the parameter apasswd in the file /portal/user-register.php...
CVE-2023-32491
Dell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file vulnerability in SNMPv3. A low privileges user could potentially exploit this vulnerability, leading to information disclosure...
PT-2023-4389 · Moxa · Moxa Tn-5900 Series
Name of the Vulnerable Software and Affected Versions: Moxa TN-5900 Series firmware version v3.3 and prior Description: The issue is related to improper authentication in the web API handler of the Moxa TN-5900 Series firmware, allowing low-privileged APIs to execute restricted actions. This...
Codedoc Security Vulnerabilities
Codedoc is a documentation generator for C/C ++ code. Michaelrsweet A security vulnerability exists in codedoc version v.3.7, which stems from the presence of a buffer overflow vulnerability that allows attackers to cause a denial of service via the codedoc.c:1742 component...
Python cpython Security Vulnerabilities
cpython is the Python Foundation's Python interpreter implemented in the C language. Python A security vulnerability exists in version 3.7 of cpython that stems from a crash due to improper reference counting in the asyncio.swapcurrenttask module...
CVE-2021-25856
An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php...
Intel Server Board Code Issue Vulnerability
Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in IntelR Server Board M10JNP2SB integrated BMC video drivers versions prior to 3.0. An attacker can exploit the vulnerability to elevate privileges...
AudioCodes VoIP Trust Management Issues Vulnerability
AudioCodes VoIP is a series of desk phones from the Israeli company AudioCodes. A security vulnerability exists in AudioCodes VoIP desk phones version 3.4.4.1000 and earlier versions, which stems from the use of hard-coded keys in libacdes3.so...
Ticket Support Script Code Issue Vulnerability
Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2. The vulnerability can be exploited by an attacker to execute arbitrary code by uploading a specially crafted file...
PT-2023-5263 · Libreswan +5 · Libreswan +5
Name of the Vulnerable Software and Affected Versions: Libreswan versions 3.x and 4.x before 4.12 Description: An issue was discovered in Libreswan when an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such a...
PT-2023-15027 · Stormshield · Stormshield Ssl Vpn Client
Name of the Vulnerable Software and Affected Versions: Stormshield SSL VPN Client versions prior to 3.2.0 Description: A logged-in user, able to only launch the VPNSSL Client, can use the OpenVPN instance to execute malicious code as administrator on the local machine. Recommendations: For versio...
ZKTeco BioAccess IVS 路径遍历漏洞
ZKTeco BioAccess IVS is a lite web-based security platform from ZKTeco, China. A path traversal vulnerability exists in ZKTeco BioAccess IVS v3.3.1, which stems from the program's failure to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to...
CVE-2023-33564
There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
PHPJabbers Time Slots Booking Calendar Authorization Issues Vulnerability
PHPJabbers Time Slots Booking Calendar is a booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from a lack of validation when changing an email address or password on the profile page, allowing a remote attacker to tak...
PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability
PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability in the theme parameter of Preview.php...
PT-2023-24960 · Unknown · Wifi Soft Unibox Administration
Name of the Vulnerable Software and Affected Versions: Wifi Soft Unibox Administration versions 3.0 through 3.1 Description: The issue arises from the lack of validation or sanitization of user input in the username field of the login page, leading to SQL Injection. This allows attackers to injec...