The vulnerability of the MODULYS GP (MOD3GP-SY-120K) module-based power supply management web application allows a attacker to perform arbitrary actions.

The vulnerability of the MODULYS GP MOD3GP-SY-120K web-based management application relates to its dependence on cookie files without any checks for their validity and integrity. Exploiting this vulnerability could allow an attacker to perform arbitrary actions remotely...

The vulnerability of the User Creation Handler component of the /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 file in the C-DATA Web Management System allows a malicious individual to escalate their privileges.

The vulnerability of the User Creation Handler component in the /cgi-bin/jumpto.php?class=user&page=configsave&isphp=1 system of the C-DATA Web Management System is related to errors in managing access control. Exploiting this vulnerability could allow a malicious actor to increase their privileg...

Green Rocket Security GreenRADIUS Cross-Site Scripting Vulnerability

Green Rocket Security GreenRADIUS is a multiple authentication server from Green Rocket Security, Inc. to integrate with various applications and services to enforce MFA. A cross-site scripting vulnerability exists in Green Rocket Security GreenRADIUS v5.1.1.1 and prior versions, which stems from...

CVE-2023-39266

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...

Cross site scripting

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...

CVE-2023-39266 Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to...

CVE-2023-39266

CVE-2023-39266 affects ArubaOS-Switch Web Management Interface. Descriptions across multiple connected sources confirm an unauthenticated remote attacker can perform a stored cross-site scripting (XSS) attack via certain configuration options, causing the attacker to run arbitrary script code in ...

Aruba Networks ArubaOS 跨站脚本漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks. A cross-site scripting vulnerability exists in the Aruba Networks ArubaOS Switch, which originates from a Web management interface...

CVE-2023-3453

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition...

CVE-2023-3453

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition...

CVE-2023-3453

CVE-2023-3453 affects ETIC Telecom RAS (Remote Access Server) versions 4.7.0 and earlier. The vulnerability stems from insecure default initialization where the web management portal authentication is disabled by default, allowing an attacker with adjacent network access to reconfigure the device...

CVE-2023-37439 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...

Aruba Networks EdgeConnect SD-WAN Orchestrator 跨站脚本漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a stored cross-site scripting vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator 跨站脚本漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a stored cross-site scripting vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from an SQL injection vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from an SQL injection vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from an SQL injection vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator 代码问题漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a server-side request forgery vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from an SQL injection vulnerability in the web-based management interface...

Aruba Networks EdgeConnect SD-WAN Orchestrator SQL注入漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from an SQL injection vulnerability in the web-based management interface...