17353 matches found
Aruba Networks EdgeConnect 跨站脚本漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from a flaw in the web-based management interface that could allow a remote attacker to conduct a Reflective Cross-Site Scripti...
[SECURITY] [DSA 5298-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5298-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2022 https://www.debian.org/security/faq -...
[SECURITY] Fedora 37 Update: nextcloud-25.0.1-1.fc37
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 36 Update: nextcloud-25.0.1-1.fc36
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
ZKTeco ZKBio Time 跨站脚本漏洞
ZKTeco ZKBio Time is a powerful web-based time and attendance management software from ZKTeco, China. A security vulnerability exists in ZKTeco ZKBio Time prior to version 3.1-164, which originates from a vulnerability that allows users to embed malicious code in the Web UI...
PT-2022-25800 · Ibm · Ibm Cloud Transformation Advisor
Name of the Vulnerable Software and Affected Versions: IBM Cloud Transformation Advisor versions 2.0.1 through 3.3.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within ...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a attacker to execute arbitrary commands.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...
FreshRSS 信息泄露漏洞
FreshRSS is a free, self-hosted RSS aggregator from the FreshRSS open source. An information disclosure vulnerability exists in versions of FreshRSS prior to 1.20.2 that stems from a remote user being able to access user configuration files, such configurations contain hashed passwords for the we...
The vulnerability of the luci-mod-system web interface of the LuCI configuration tool in the embedded operating system OpenWrt allows a hacker to perform cross-site scripting attacks.
The vulnerability of the Luci-mod-system web interface configuration module in the embedded operating system OpenWrt is related to the lack of protection for the web page structure during the processing of SSH keys from the /etc/dropbear/authorizedkeys file. Exploiting this vulnerability allows a...
PT-2022-16030 · Freshrss · Freshrss
Name of the Vulnerable Software and Affected Versions: FreshRSS versions prior to 1.20.2 Description: FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords of the...
Fedora: Security Advisory for nextcloud (FEDORA-2022-49b20342c0)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Design/Logic Flaw
Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface...
CVE-2022-37918
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...
CVE-2022-37916
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...
Aruba Networks AirWave Management Platform 安全漏洞
Aruba Networks AirWave Management Platform is the leading multi-vendor management platform designed for local campus environments, providing granular visibility into wired and wireless networks from Aruba Networks. A security vulnerability in Aruba Networks AirWave Management Platform version...
PT-2022-24150 · Aruba · Aruba Airwave Management Platform
Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions 8.2.15.0 and below Description: Vulnerabilities in the AirWave Management Platform web-based management interface exist, exposing some URLs to a lack of proper access controls. These vulnerabilities...
CVE-2022-37918
CVE-2022-37918 affects Aruba AirWave Management Platform (web interface). The root issue is broken access control on web-based URLs, allowing a remote attacker with limited privileges to access sensitive information and/or modify network configurations at higher privileges. Affected versions are ...
