Fidelis Network Deception SQL注入漏洞

Fidelis Network Deception is a security product from Fidelis USA. It is used to detect threats and prevent data loss with features such as detecting malicious behavior, identifying traffic anomalies, and automatically responding to advanced threats. Fidelis Network suffers from a SQL injection...

Synology DiskStation Manager Information Disclosure Vulnerability (CNVD-2021-45741)

DiskStation Manager DSM is an operating system that runs on all Synology NAS and can be operated through an intuitive web interface. An information disclosure vulnerability exists in the webapi component of Synology DiskStation Manager prior to version 6.2.3-25426-3. A remote attacker can exploit...

The vulnerability of the Postorius-permissions.sh web interface implementation allows a hacker to escalate their privileges.

The vulnerability of the Postorius-permissions.sh web interface implementation for accessing Mailman archives is related to the tracking of symbolic links. Exploiting this vulnerability could allow an attacker to increase their privileges...

mongo-express 跨站脚本漏洞

mongo-express is a lightweight, web-based management interface for interactively managing MongoDB databases. A security vulnerability exists in mongo-express that stems from the ability of an unauthorized user to send large amounts of data...

CVE-2021-35049

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and return results in an HTTP response in an authenticated...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-1543

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1542

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1541 Cisco Small Business 220 Series Smart Switches Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

Cisco Small Business 220 Series Smart Switches 跨站脚本漏洞

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco. A cross-site scripting vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which originates from a vulnerability in the web management interface of the Cisco Small Business 220 Series...

Cisco Unified Intelligence Center 跨站脚本漏洞

Cisco Unified Intelligence Center provides a control panel-based canvas for organizing multiple report objects together, giving you comprehensive contact center statistics at a glance. A reflected cross-site scripting vulnerability exists in the Web management interface of Cisco Unified...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

The vulnerability in the web interface for managing data storage systems in Cisco HyperFlex HX Data Platform’s hyper-converged infrastructure allows a malicious actor to upload arbitrary files.

The vulnerability in the web interface for managing data storage systems in Cisco HyperFlex HX Data Platform deployments is related to the absence of authentication procedures. Exploiting this vulnerability allows an attacker to upload arbitrary files by sending specially crafted HTTP requests...

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface for managing Cisco AsyncOS operating systems is related to deficiencies in the security of operational data in the source code. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information throug...

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by executing a specially created...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL commands and gain unauthorized access to modify data.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P web interface management interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands an...