32 matches found
EUVD-2016-10359
Malware in sbrugna...
EUVD-2016-10360
Malware in sbrugna...
EUVD-2017-17192
Malware in sbrugna...
CVE-2021-35336
Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...
Tieline IP Audio Gateway 访问控制错误漏洞
IP Audio Gateway is an audio codec from Tieline. An access control error vulnerability exists in Tieline IP Audio Gateway, which stems from a vulnerability in the Tieline Web Administrative Interface that could allow an unauthenticated user with a highly privileged account to access sensitive par...
PT-2021-20891
Name of the Vulnerable Software and Affected Versions: Tieline IP Audio Gateway versions 2.6.4.8 and below Description: The issue concerns Incorrect Access Control in the Tieline Web Administrative Interface, allowing an unauthenticated user to access sensitive parts of the system with a...
CVE-2021-35336: Initialization of a Resource with an Insecure Default
Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...
CVE-2020-35338
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...
CVE-2020-35338
CVE-2020-35338 affects Wireless Multiplex Terminal Playout Server
PT-2020-17310
Name of the Vulnerable Software and Affected Versions Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server versions 20.2.8 and earlier Description The Web Administrative Interface in the affected software has a default account with a password of pokon. Recommendations For versions 20.2...
CVE-2020-35338: Use of Hard-coded Credentials
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...
Cross site request forgery (csrf)
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface...
CVE-2018-7060
CVE-2018-7060 concerns Aruba ClearPass CSRF on authenticated users. Connected sources (NVD/CNVD) confirm: affected products are Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1. The vulnerability enables CSRF attacks that could cause an authenticated user to perform actions on the we...
PT-2018-17878
Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions 6.6.x prior to 6.6.9 Aruba ClearPass versions 6.7.x prior to 6.7.1 Description The issue allows for CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions o...
CVE-2018-7060: Cross-Site Request Forgery (CSRF)
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface...
CVE-2016-9682
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...
CVE-2016-9683
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
Dell SonicWall Secure Remote Access Multiple Command Injection Vulnerabilities
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
Command injection
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
CVE-2016-9684
Dell SonicWALL Secure Remote Access (SRA) server, version 8.1.0.2-14sv, is vulnerable to a remote command injection in the web admin CGI at /cgi-bin/viewcert. The CGI does not properly escape the CERT input before a system() call, enabling an attacker to execute arbitrary shell commands and gain ...