17361 matches found
The vulnerability in the web interface for controlling Hirschmann BAT-C2 wireless client software allows a hacker to execute arbitrary code.
The vulnerability of the web interface for managing WLAN client micro-programming software Hirschmann BAT-C2 exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the graphical web interface for managing and monitoring ClusterLabs Hawk, related to the lack of measures taken at the management level to clean data, allows a malicious actor to execute arbitrary commands on behalf of the root user.
The vulnerability of the graphical web interface for managing and monitoring ClusterLabs Hawk is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user remotely...
PT-2022-6051 · Hirschmann · Hirschmann Bat-C2
Name of the Vulnerable Software and Affected Versions: Hirschmann BAT-C2 versions prior to 09.13.01.00R04 Description: The issue is related to insufficient argument checking in the FsCreateDir Ajax function of the Hirschmann BAT-C2's web interface, allowing an authenticated attacker to inject...
PT-2022-6361 · Aruba · Aruba Edgeconnect Enterprise
Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise versions 9.2.1.0 and below Aruba EdgeConnect Enterprise versions 9.1.3.0 and below Aruba EdgeConnect Enterprise versions 9.0.7.0 and below Aruba EdgeConnect Enterprise versions 8.3.7.1 and below Description: A...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to upload arbitrary files.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending specially crafted HTTP requests...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent existing security restrictions and upload or delete certain files.
The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...
The vulnerability of the SetWebFilterSetting() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the SetWebFilterSetting function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize input data in the string entered by the user when processing the WebFilterURLs element. Exploiting this vulnerability can...
The vulnerability of the SetSysEmailSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the SetSysEmailSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the lack of measures taken to sanitize the input data entered by the user in the input field. Exploiting this vulnerability can allow a remote...
The vulnerability in the web interface of D-Link DIR-1935 microprogramming software-enabled routers allows a hacker to execute arbitrary code.
The vulnerability of the web interface for managing D-Link DIR-1935 microprogramming software lies in the buffer overflow that occurs during the processing of the SOAPAction header. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance (ESA) security email system, the Cisco Secure Email and Web Manager content protection device, and the Cisco Secure Web Appliance (formerly Cisco Web Security Appliance (WSA)) web gateway allows a perpetrator to expose protected information.
The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to authentication errors. Exploiting th...
The vulnerability of the SetSysLogSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the SetSysLogSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize the input data in the string entered by the user when processing the IPAddress element. Exploiting this vulnerability allows...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a attacker to execute XSS attacks.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
CVE-2022-36785
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
CVE-2022-36785
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
Authorization
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
CVE-2022-36785 D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
CVE-2022-36785 D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a attacker to perform a CSRF attack.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...
PT-2022-5726 · Cisco · Cisco Identity Services Engine
Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the...