Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is a network operating system developed by the American company Cisco. There is a security vulnerability in Cisco IOS XE Software. This vulnerability stems from the upload of device configurations through insecure tunnels, which may allow unauthenticated remote attackers to...

Zyxel ATP series firmware和Zyxel USG FLEX series firmware 安全漏洞

Zyxel ATP series firmware and Zyxel USG FLEX series firmware are both products of the China-based company Zyxel.Zyxel ATP series firmware is a series of firewall firmware.Zyxel USG FLEX series firmware is a series of Zyxel ATP series firmware is a series of firewall firmware. A security...

CVE-2024-35277

CVE-2024-35277 affects Fortinet FortiPortal and FortiManager. The issue is a missing authentication for a critical function, enabling an attacker to access the configuration of managed devices by sending specially crafted packets. Affected versions include FortiPortal 6.0.0–6.0.15 and FortiManage...

PT-2024-13791 · Unknown · Bulk Edit Post Titles

Name of the Vulnerable Software and Affected Versions: Bulk Edit Post Titles versions through 5.0.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.0....

CVE-2022-22410

IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...

8x8: Outdated Coturn is vulnerable to known vulnerabilities (High)

Jitsi had several CoTurn servers that needed improvements to their access configurations and updated...

CVE-2017-16651

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid...