Splunk 资源管理错误漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

The vulnerability in the web interface of Cisco BroadWorks Hosted Thin Receptionist allows a attacker to disclose protected information.

The vulnerability of the Cisco BroadWorks Hosted Thin Receptionist software’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the web interface of microprogramming software for wireless access points in Moxa’s industrial systems, such as Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the microprogramming software for wireless access points like Moxa TAP-323 and Moxa TAP-213, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface of Moxa wireless access points for industrial systems, namely Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the wireless access points with Moxa TAP-323 and Moxa TAP-213, stems from the lack of protective measures for the web page structure...

The vulnerability in the J-Web web interface of the JunOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the J-Web web interface of the JunOS operating system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-6235 · Cisco · Cisco Rv345 +3

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: A vulnerability in the web-based management interface of the affected devices could allow an unauthenticated, remote attacker to...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to read and modify files on a vulnerable device.

The vulnerability of the Cisco Identity Services Engine’s web interface relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read and modify files on the vulnerable device by sending a specially crafted HTTP request...

CVE-2022-33207

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP reque...

CVE-2022-30603

An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger...

CVE-2022-27804

An os command injection vulnerability exists in the web interface utilsetabodecode functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this...

PT-2022-18600 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A command injection issue exists in the web interface's util set abode code functionality, allowing arbitrary command execution via a specially-crafted HTTP...

PT-2022-20198 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An OS command injection issue exists in the web interface /action/iperf functionality. A specially-crafted HTTP request can lead to arbitrary command...

PT-2022-19642 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An authentication bypass issue exists in the web interface, specifically in the /action/factory functionality. This can be triggered by a specially-crafted...

PT-2022-21383 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A double-free issue exists in the web interface /action/ipcamSetParamPost functionality. This can be triggered by a specially-crafted HTTP request, leading t...

The vulnerability in the web interface for managing the Cisco Unified Intelligence Center reporting tool and the Cisco Unified Contact Center Express operator automation tool allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports using the Cisco Unified Intelligence Center and the Cisco Unified Contact Center Express software lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability in the HTTP web interface of the software for high-voltage distribution device monitoring systems from Hitachi Modular Switchgear Monitoring (MSM) allows a attacker to perform a CSRF attack.

The vulnerability of the HTTP web interface of the performance measurement software for Hitachi Modular Switchgear Monitoring systems is related to the falsification of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

PT-2022-7071 · Tionix · Tionix Virtual Security

Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...

The vulnerability in the web interface of the configuration software for TP-Link M7350 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for configuring microprogramming software on TP-Link M7350 routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2022-5297 · Cisco · Cisco Smart Software Manager On-Prem

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager On-Prem affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to elevate privileges on an affected system. This issue is d...

PT-2022-16203 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.6 and below Aruba ClearPass Policy Manager versions 6.9.11 and below Description: Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remo...

CVE-2022-3001

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...