19921 matches found
CVE-2025-20166
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...
CVE-2025-20166
CVE-2025-20166 affects Cisco Common Services Platform Collector (CSPC). The vulnerability is an authenticated, remote cross-site scripting (XSS) flaw in the CSPC web-based management interface caused by insufficient validation of user-supplied input. An attacker with at least a low-privileged acc...
CVE-2025-20123
Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against users of the interface of an affected system. These vulnerabilities exist because the web-based...
CVE-2024-54007
Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...
CVE-2024-54007
The CVE-2024-54007 entry relates to Hewlett Packard Enterprise 501 Wireless Client Bridge. The web interface contains multiple command-injection vulnerabilities that can enable authenticated remote command execution, allowing an attacker to run arbitrary commands as a privileged user on the under...
CVE-2024-54006 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...
PT-2025-1004 · Unknown · 501 Wireless Client Bridge
Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge affected versions not specified Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated...
CVE-2024-54007: Improper Neutralization of Special Elements used in a Command
Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...
PT-2025-1018
Name of the Vulnerable Software and Affected Versions HPE Aruba Networking 501 Wireless Client Bridge affected versions not specified Description The issue is related to command injection vulnerabilities in the web interface of the HPE Aruba Networking 501 Wireless Client Bridge. These...
Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability
The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...
Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability
The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...
CVE-2024-54006: Improper Neutralization of Special Elements used in a Command
Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...
IBM UrbanCode Deploy security vulnerability
IBM UrbanCode Deploy IBM UCD is a suite of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model and uses remote agent technology to automate the deployment of complex applications i...
CVE-2024-48456
An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a...
Moxa EDR-8010 Command Structure Code Execution
The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices stems from the lack of measures taken to neutralize special commands used in the operating system. Exploiting this vulnerability allows a malicious actor to execute...
Dahua Devices Path Traversal Vulnerability (Jan 2025) - Active Check
Multiple Dahua devices and their OEMs are prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Dahua Devices Information Disclosure Vulnerability (Jan 2025) - Active Check
Multiple Dahua devices and their OEMs are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
CVE-2024-13131
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9680. Reason: This candidate is a reservation duplicate of CVE-2019-9680. Notes: All CVE users should reference CVE-2019-9680 instead of this candidate. All references and descriptions in this candidate have been remov...
