PT-2025-5706 · Cisco · Cisco Expressway Series

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack...

CVE-2024-22045

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.1 SP1. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. This information is also...

CVE-2024-40693

IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing furth...

CVE-2024-35207

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The web interface of the affected devices are vulnerable to Cross-Site Request ForgeryCSRF attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform...

CVE-2025-0630

Multiple Western Telematic WTI products contain a web interface that is vulnerable to a local file inclusion attack LFI, where any authenticated user has privileged access to files on the device's filesystem...

CVE-2025-0630 Western Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path

Multiple Western Telematic WTI products contain a web interface that is vulnerable to a local file inclusion attack LFI, where any authenticated user has privileged access to files on the device's filesystem...

CVE-2025-0630

CVE-2025-0630 affects Western Telematic NPS/DSM/CPM series web interfaces and is a Local File Inclusion (LFI) vulnerability. An authenticated user can access files on the device filesystem (confidentiality impact HIGH). CVSS metrics show MEDIUM severity with network attack vector and LOW privileg...

CVE-2025-25039

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager CPPM allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on...

CVE-2025-23059

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive...

Security update for cups

This update for cups fixes the following issues: Version upgrade to 2.4.11: See https://github.com/openprinting/cups/releases CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support checkbox support, modifying printers and others fixes. Detail...

The vulnerability of the web interface of the Cacti network monitoring software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the Cacti network monitoring software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2025-2760 · Ibm · Ibm Sterling B2B Integrator

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.3 Description: The issue allows an authenticated user to embed arbitrary JavaScript code in the Web UI, altering the...

The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6476AC allows a hacker to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of EDIMAX BR-6476AC microprogrammed software routers lies in the falsification of inter-site requests due to incorrect processing of special symbols. Exploiting this vulnerability allows a remote attacker to enhance their privileges and execute arbitrary...

The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6476AC allows a hacker to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6476AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...

The vulnerability in the web interface of TP-Link Archer A20 micro-programming software allows a hacker to execute arbitrary code.

The vulnerability of the web interface for managing TP-Link Archer A20 wireless routers involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user specifically submits a specially crafted G...

CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2025-23055

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the...

CVE-2025-23054

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not allowed by their privilege level. Successful exploitation could allow an attacker to manipulate user generated files,...

CVE-2025-23053

A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

SUSE CVE-2024-45598

Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in either Installation Step 5 or in Configuration-Settings-Paths tab to a local file inside the server. Then simply going to Logs tab and...