17248 matches found
ORing IAP-420 跨站脚本漏洞
The ORing Net IAP-420+ is a wireless access point from China Power ORing. A cross-site scripting vulnerability exists in the ORing IAP-420 2.01e and prior versions, which stems from a lack of input validation in the web interface, resulting in cross-site scripting...
PT-2024-13145 · Aten · Aten Pe6208
Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the outlet control function of the web interface, allowing remote authenticated users to control all outlets as if they were the...
ATEN International PE6208 安全漏洞
The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from improper input validation in the user management...
PT-2024-13146 · Aten · Aten Pe6208
Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue concerns incorrect access control in the firewall management function of the web interface, allowing remote authenticated users to alter local firewall settings as if they we...
ORing IAP-420 跨站脚本漏洞
The ORing Net IAP-420+ is a wireless access point from China Power ORing. A security vulnerability exists in ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation and operating system command integration for input in the web interface, resulting in command...
ATEN International PE6208 安全漏洞
The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in ATEN International PE6208 version 2.3.228, version 2.4.232. An attacker can exploit the vulnerability to log in to the web interface and ga...
PT-2024-13142 · Aten · Aten Pe6208
Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue concerns default credentials for the privileged web interface account. These credentials are not changed after the first login, allowing attackers to log in to the web...
ATEN International PE6208 安全漏洞
The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the account management...
ATEN International PE6208 安全漏洞
The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the account management...
ATEN International PE6208 安全漏洞
The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the log management functi...
The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary code.
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code by injecting a specially crafted SQL query remotely...
Fedora: Security Advisory for nextcloud (FEDORA-2024-d67f9827b2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-6560 · Supermicro · Supermicro Bmc Firmware
Name of the Vulnerable Software and Affected Versions: Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards and CMM6 modules affected versions not specified Description: An issue was discovered in the Supermicro BMC firmware that allows an unauthenticated user to...
The vulnerability in the web interface of the Veeam Backup Enterprise Manager component allows a perpetrator to escalate their privileges.
The vulnerability in the web interface of the Veeam Backup Enterprise Manager component is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
OESA-2024-1660 cockpit security update
Cockpit makes GNU/Linux discoverable. See Linux server in a web browser and perform system tasks with a mouse. It’s easy to start containers, administer storage, configure networks, and inspect logs with this package. Security Fixes: An SSRF issue was discovered in cockpit-project.org Cockpit 234...
PT-2024-5284 · Splunk · Splunk Config Explorer
Name of the Vulnerable Software and Affected Versions: Splunk Config Explorer versions prior to 1.7.16 Description: The issue exists due to inadequate protection of the web page structure in Splunk Config Explorer, allowing for a cross-site scripting XSS attack. If exploited, this could lead to t...
pcs security update
0.10.18-2.0.1 - Replace HAM-logo.png with a generic one 0.10.18-2 - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26445, RHEL-26447, RHEL-26449 0.10.18-1 - Rebased to the latest sources see CHANGELOG.md Resolves: RHEL-7741 0.10.17-6 - Rebased to th...
PT-2024-4166
Name of the Vulnerable Software and Affected Versions HP LaserJet Pro affected versions not specified Description The issue is related to the lack of protection for the web page structure in the HP LaserJet Pro printer firmware. This can be exploited by a remote attacker to conduct a Cross-Site...
PT-2024-4810 · Ibm · Ibm Security Guardium
Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.4 through 12.0 Description: The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to exploit it and potentially disclose credentials within a trusted session...