The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software for managing unified communications is caused by errors in processing input data, allowing a hacker to re-record files in the file system.

The vulnerability of the Cisco Prime Collaboration Assurance software management interface arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to re-record files in the file system...

The vulnerability in the web interface of the Juniper Networks Junos Space Security Director arises from insufficient protection of the web page structure, allowing attackers to disclose sensitive information or perform actions on behalf of other users.

The vulnerability of the Juniper Networks Junos Space Security Director administrative interface arises due to insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform actions on behalf of other users...

Cisco Energy Management Suite XML External Entity Injection Vulnerability

Cisco Energy Management Suite is the United States Cisco Cisco company's set of energy management suite. The product is mainly used to manage network equipment such as energy management. An XML external entity injection vulnerability exists in the web-based user interface of the Cisco Energy...

The vulnerability of the web interface of the microprogramming software for Cisco RV110W Wireless-N VPN and the multifunctional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of Microprogramming Software for Cisco RV110W Wireless-N VPN and Multi-Function VPN Routers such as Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN lies in insufficient cleaning of input data used during command generation. Exploiting this...

The vulnerability in the web interface of the operating system PAN-OS allows a hacker to terminate all control sessions.

The vulnerability in the web interface of the operating system PAN-OS arises from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to terminate all control sessions and redirect authenticated users to the login page...

The vulnerability of the web interface of the microprogramming software-based network interface cards Cisco RV110W Wireless-N VPN and the multi-functional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the web interfaces of Cisco RV110W Wireless-N VPN and Cisco RV130W Wireless-N, as well as Cisco RV215W Wireless-N VPN microprogramming-based network interface devices, is related to buffer overflow attacks in memory. Exploiting this vulnerability can allow an attacker to...

Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN. A cross-site scripting vulnerability exists in Cisco Wireless LAN Controller Software due to a web-based...

TP-Link TL-WRN841N Cross-Site Request Forgery Vulnerability

The TP-Link TL-WRN841N is a wireless router product from China P&L TP-LINK. A cross-site request forgery vulnerability exists in the web interface of the TP-Link TL-WRN841N version 0.9.1 4.16 v0348.0, which stems from the program failing to adequately validate the referer field. A remote attacker...

The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway allows a intruder to execute arbitrary code.

The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway arises from errors in processing GET requests. Operating this device allows a malicious actor to execute arbitrary code using a specially crafted GET request...

Intelbras NPLUG Cross-Site Request Forgery Vulnerability

Intelbras NPLUG is a wireless relay device from Intelbras Poland. A cross-site request forgery vulnerability exists in the web interface in the Intelbras NPLUG version 1.0.0.14 wireless relay device. A remote attacker can use this vulnerability to modify the wireless SSID, reboot the device, edit...

CVE-2018-12456

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access...

Cross site request forgery (csrf)

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 All versions V4.2.3. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a...

Cross-Site Scripting Vulnerability in Multiple Cisco Products

Cisco Webex Events Center, etc. are video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web-based management interface of several Cisco products, which can be exploited by remote attackers to execute arbitrary script code in the context of the affected...

CVE-2018-0451 Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

UBUNTU-CVE-2018-1000226

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API /cobblerapi that can result in Privilege escalation, data manipulation or...

Lenovo xClarity Administrator Information Disclosure Vulnerability (CNVD-2018-14352)

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. A security vulnerability exists in the Web API in Lenovo LXCA...

IBM RQM/RCLM Cross-Site Scripting Vulnerability (CNVD-2018-12620)

IBM Rational Quality Manager is a Web-based collaborative quality management solution.IBM Rational Collaborative Lifecycle Management is an application lifecycle management solution. A cross-site scripting vulnerability exists in the implementation of IBM Rational Quality Manager and IBM Rational...

Schneider Electric Evlink Charging Station Elevation of Privilege Vulnerability

The Schneider Electric Evlink Charging Station is a commercial electric vehicle charging solution from the French company Schneider Electric. A security vulnerability exists in the web interface of Schneider Electric Evlink Charging Station prior to version 3.2.0-12v1, which is caused by the...

IBM RQM/RCLM Cross-Site Scripting Vulnerability (CNVD-2018-12638)

IBM Rational Quality Manager is a Web-based collaborative quality management solution.IBM Rational Collaborative Lifecycle Management is an application lifecycle management solution. A cross-site scripting vulnerability exists in the implementation of IBM Rational Quality Manager and IBM Rational...

CVE-2017-3960

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter...