CVE-2024-23590 Apache Kylin: Session fixation in web interface

Session Fixation vulnerability in Apache Kylin. This issue affects Apache Kylin: from 2.0.0 through 4.x. Users are recommended to upgrade to version 5.0.0 or above, which fixes the issue...

PT-2024-19952 · Apache · Apache Kylin

Name of the Vulnerable Software and Affected Versions: Apache Kylin versions 2.0.0 through 4.x Description: The issue is a Session Fixation vulnerability in Apache Kylin. This vulnerability affects the web interface and can lead to session fixation, allowing for remote attacks and unauthorized...

Cisco Unified Contact Center Management Portal Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Management Portal is an intuitive and secure Web-based application from Cisco that allows supervisors and managers to meet the complex and changing demands of the contact center in real time, making contact center management easier and more efficient than ever. A...

Nginx UI Directory Read Arbitrary Files

The vulnerability of the configuration settings in the directory /api/configs of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files...

UBUNTU-CVE-2024-51482

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

PT-2024-7817 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: FileManager affected versions not specified Description: The vulnerability in the FileManager web interface is related to deficiencies in the deserialization mechanism. Exploitation of this issue may allow a remote attacker to execute arbitra...

DrayTek Vigor XSS

The vulnerability of the web interface of DrayTek Vigor microprogramming software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

DrayTek Vigor Routing XSS

The vulnerability of the wlogin.cgi web interface script of the DrayTek Vigor router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Cisco Small Business RV042 Router Code Execution

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

DrayTek Vigor Code Execution

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure by sending a specially...

Cisco Small Business RV042 Router Code Execution

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

DrayTek Vigor Router ft_payloads_dns DNS Failure

The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Cisco Identity Services Engine Unauthorized Access

The vulnerability in the web interface of the Cisco Identity Services Engine management platform for network policies relates to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a special...

Cisco Secure Firewall Management Center Privilege Escalation

The vulnerability in the web-based management interface of Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco Secure Firewall Management Center XSS

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow attackers to execute cross-site scripting...

Cisco Small Business RV042 Router Code Execution

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

DrayTek Vigor -enabled routers Web Interface Modification DoS

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the writing and reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to modify settings remotely or cause service failures...

Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...