3174 matches found
PT-2022-6851
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u321, 8u311, 11.0.13, 17.0.1 Oracle GraalVM Enterprise Edition versions 20.3.4, 21.3.0 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE an...
keycloak-server-spi-private: ECP SAML binding bypasses authentication flows
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The...
CVE-2021-37196
A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...
CVE-2021-37196
A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...
CVE-2021-42748
In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...
Fortinet FortiOS and FortiProxy Out-of-bounds Write
A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users...
Formpipe Lasernet 安全漏洞
Formpipe Lasernet is a document processing solution from the Danish company Formpipe. A security vulnerability exists in versions of Formpipe Lasernet prior to 9.13.3 that allows documents to be included in a client web service either through an authenticated attacker, or in a configuration that...
FastLine Media Beaver Builder 安全漏洞
FastLine Media Beaver Builder is a front-end layout and styling designer from FastLine Media, Inc. It provides a WYSIWYG view when developing content areas. A security vulnerability exists in FastLine Media Beaver Builder, which stems from versions from Beaver Builder to 2.5.0.3, and can be...
CVE-2021-20871
Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-3...
PT-2022-11334 · Unknown +1 · Checkmk Raw Edition +1
Name of the Vulnerable Software and Affected Versions: CheckMK Raw Edition software versions 1.5.0 through 1.6.0 Description: The issue allows for Reflected XSS, enabling an attacker to inject malicious HTML content, including JavaScript or other client-side scripts, into a user's browser. This...
CVE-2021-20175
Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the SOAP interface. By default, all communication to/from the device's SOAP Interface port 5000 is sent via HTTP, which causes potentially sensitive information such as usernames and passwords to be...
Exploit for Insufficiently Protected Credentials in Samsung Syncthru_Web_Service
CVE-2021-42913 Samsung Printer SCX-6X55X Improper Ac...
CVE-2021-42913
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required...
Authentication flaw
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required...
CVE-2021-42913
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required...
CVE-2021-42913
CVE-2021-42913 affects Samsung SCX-6x55X printers via the SyncThru Web Service. The issue is improper access control: an unauthenticated attacker can read HTML source to obtain a list of SMB users and cleartext passwords. The vulnerability outcome is explicit in multiple sources (NVD entry, Red H...
PT-2021-23697 · Samsung · Samsung Scx-6X55X
Name of the Vulnerable Software and Affected Versions: Samsung SCX-6x55X printers affected versions not specified Description: The issue allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code of the SyncThru Web Service. Authentication is...
CVE-2021-40851
TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...