4525 matches found
PT-2024-7743 · Cisco · Cisco Nexus Dashboard Fabric Controller
Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller NDFC affected versions not specified Description: A vulnerability in the REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated...
PT-2024-8177 · Cisco · Cisco Asyncos
Name of the Vulnerable Software and Affected Versions: Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated,...
Cisco Identity Services Engine 跨站脚本漏洞
Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices to develop and enforce policies to regulate the network. The Cisco Identity Services Engine suffers...
Cisco Meeting Server 信息泄露漏洞
Cisco Meeting Server Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. An information disclosure vulnerability exists in Cisco Meeting Server, which stems from improper storage of sensitive information in the Web management...
CVE-2023-29126
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication...
CVE-2023-29120
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system...
CVE-2023-29117
Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...
CVE-2023-29116
Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained...
CVE-2023-29118
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29117
Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system...
CVE-2023-29118
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29119
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29120 Unauthorized Remote Command Execution in Enel X Juicebox
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system...
CVE-2023-29120
CVE-2023-29120 affects the Waybox Enel X web management application. The vulnerability description indicates it could be used to execute arbitrary OS commands and grant administrator privileges on the Waybox system (remote code execution with high impact). The connected documents corroborate a ri...
CVE-2023-29119 Unauthorized SQLite Injection
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29119 Unauthorized SQLite Injection
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php...
CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox
Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php...
CVE-2023-29118
CVE-2023-29118 affects the Waybox Enel X web management application. The vulnerability allows an attacker to cause arbitrary requests to the internal database via the endpoint /admin/versions.php. The provided documents describe the impact as arbitrary database actions, but do not detail the root...