Authorization Bypass

cacti is vulnerable to Authorization Bypass. This vulnerability exists due to improper validation in the PHP code of the cactildapauth function. A remote attacker can exploit this vulnerability to bypass authentication and gain unauthorized access to the Cacti web interface...

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices allows a attacker to compromise data integrity.

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices is related to a modification of the PHP external variable. Exploiting this vulnerability allows an attacker to compromise data integrity from a remote location...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager EPNM software relates to insufficient data cleaning provided by users. Exploiting this vulnerability allows a malicious actor to carry out XSS attack...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC), a device for remote administration of servers, allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Integrated Management Controller IMC exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the web interface for controlling Cisco Expressway Series and Cisco Telepresence VCS devices allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based management interfaces for Cisco Expressway Series and Cisco Telepresence VCS devices exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execu...

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices allows a attacker to compromise data integrity.

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices is related to a modification of the PHP external variable. Exploiting this vulnerability allows an attacker to compromise data integrity from a remote location...

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2023-39266

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...

Cross site scripting

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

The vulnerability of the Cisco Umbrella cloud security service’s web interface allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the Cisco Umbrella cloud security web interface is related to resource release errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

CVE-2023-39678

The CVE-2023-39678 entry describes an XSS flaw in the web interface (Log Query page) of the BDCOM OLT P3310D-2AC, firmware 10.1.0F Build 69083. Vulnerable component: the Log Query username parameter; root cause is reflected/stored XSS allowing arbitrary web script/HTML execution. Impact explicitl...

PT-2023-26856 · Aruba · Arubaos-Switch

Name of the Vulnerable Software and Affected Versions: ArubaOS-Switch affected versions not specified Description: A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of th...

PT-2023-27069 · Bdcom · Bdcom Olt P3310D-2Ac

Name of the Vulnerable Software and Affected Versions: BDCOM OLT P3310D-2AC version 10.1.0F Build 69083 Description: A cross-site scripting XSS vulnerability in the device web interface, specifically the Log Query page, allows attackers to execute arbitrary web scripts or HTML via a crafted paylo...

The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 allows a hacker to execute arbitrary commands with elevated privileges.

The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers such as NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 exists due to the lack of measures taken to neutralize the special elements used in the operating syst...

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance, a software tool for managing cloud systems, allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface for managing Cisco Intersight Virtual Appliance software lies in insufficient validation of input data during the extraction of loaded software packages. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the Cisco Identity Services Engine (ISE) web interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Identity Services Engine ISE web interface is related to the improper storage of confidential information in the web interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance, a software tool for managing cloud systems, allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface for managing Cisco Intersight Virtual Appliance software lies in insufficient validation of input data during the extraction of loaded software packages. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...