ORing IAP-420 跨站脚本漏洞

The ORing Net IAP-420+ is a wireless access point from China Power ORing. A cross-site scripting vulnerability exists in the ORing IAP-420 2.01e and prior versions, which stems from a lack of input validation in the web interface, resulting in cross-site scripting...

PT-2024-13141 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the account management function of the web interface, allowing remote authenticated users to read user and administrator account...

PT-2024-13144 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the logs management function of the web interface, allowing remote attackers to obtain device logs via an HTTP GET request. The logs...

PT-2024-13140 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue concerns incorrect access control in the account management function of the web interface, allowing remote authenticated users to alter user and administrator account...

PT-2024-13147 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the firmware upgrade function of the web interface. This allows remote authenticated users to submit a firmware image via HTTP POST...

PT-2024-36031 · Iap-420 · Iap-420

Name of the Vulnerable Software and Affected Versions: IAP-420 versions 2.01e and below Description: The issue is related to missing input validation in the ORing IAP-420 web-interface, which allows stored Cross-Site Scripting XSS. This problem is being actively exploited. Recommendations: For...

Oracle Linux 8 : pcs (ELSA-2024-2953)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2953 advisory. - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26445, RHEL-26447, RHEL-26449 Tenable has extracted th...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the web interface outlet...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in ATEN International PE6208 version 2.3.228, version 2.4.232. An attacker can exploit the vulnerability to log in to the web interface and ga...

ORing IAP-420 跨站脚本漏洞

The ORing Net IAP-420+ is a wireless access point from China Power ORing. A security vulnerability exists in ORing IAP-420 version 2.01e and prior versions, which stems from a lack of input validation and operating system command integration for input in the web interface, resulting in command...

PT-2024-13146 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue concerns incorrect access control in the firewall management function of the web interface, allowing remote authenticated users to alter local firewall settings as if they we...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from improper input validation in the user management...

PT-2024-13145 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the outlet control function of the web interface, allowing remote authenticated users to control all outlets as if they were the...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the log management functi...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the account management...

ATEN International PE6208 安全漏洞

The ATEN International PE6208 is a power distribution unit from China-based ATEN Automation Technology ATEN International. A security vulnerability exists in the ATEN International PE6208 version 2.3.228, version 2.4.232, which originates from incorrect access control in the account management...

PT-2024-13142 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue concerns default credentials for the privileged web interface account. These credentials are not changed after the first login, allowing attackers to log in to the web...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code by injecting a specially crafted SQL query remotely...

Fedora: Security Advisory for nextcloud (FEDORA-2024-d67f9827b2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-6560 · Supermicro · Supermicro Bmc Firmware

Name of the Vulnerable Software and Affected Versions: Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards and CMM6 modules affected versions not specified Description: An issue was discovered in the Supermicro BMC firmware that allows an unauthenticated user to...