CVE-2021-36708

In ProLink PRC2402M V1.0.18 and older, the setsysinit function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router...

The vulnerabilities of the Webmail components and the Administrative Interface of the FortiMail email protection system allow attackers to execute arbitrary commands or execute arbitrary code.

The vulnerability of the Webmail components and the Administrative Interface of the FortiMail email protection system arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or code by sending specially crafted HTT...

CVE-2021-36708: Weak Password Recovery Mechanism for Forgotten Password

In ProLink PRC2402M V1.0.18 and older, the setsysinit function in the login.cgi binary allows an attacker to reset the password to the administrative interface of the router...

CVE-2021-24015

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...

CVE-2021-24015

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...

CVE-2021-24015: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...

Buffer overflow

Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically...

CVE-2021-22129

Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically...

CVE-2021-22129

CVE-2021-22129 affects Fortinet FortiMail before 6.4.5, where multiple instances of incorrect calculation of buffer size in FortiMail Webmail and Admin interfaces may allow an authenticated attacker with regular Webmail access to trigger a buffer overflow and possibly execute unauthorized code or...

CVE-2021-22129: Buffer Copy without Checking Size of Input

Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically...

CVE-2021-31925

Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface...

FortiMail - Multiple buffer overflows

Multiple instances of incorrect calculation of buffer size in FortiMail Webmail and Administrative interface may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests...

FortiMail - OS Command injection

An improper neutralization of special elementsused in an OS Command vulnerability CWE-78 in FortiMail's administrative interface may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...

CVE-2021-35336

Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...

CVE-2021-35336: Initialization of a Resource with an Insecure Default

Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...

PT-2021-20891

Name of the Vulnerable Software and Affected Versions: Tieline IP Audio Gateway versions 2.6.4.8 and below Description: The issue concerns Incorrect Access Control in the Tieline Web Administrative Interface, allowing an unauthenticated user to access sensitive parts of the system with a...

Tieline IP Audio Gateway 访问控制错误漏洞

IP Audio Gateway is an audio codec from Tieline. An access control error vulnerability exists in Tieline IP Audio Gateway, which stems from a vulnerability in the Tieline Web Administrative Interface that could allow an unauthenticated user with a highly privileged account to access sensitive par...

PT-2021-3709

Name of the Vulnerable Software and Affected Versions FortiMail versions prior to 6.4.5 Description The issue is caused by a buffer overflow on the stack due to incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail. This may allow an authenticated attacker...

PT-2021-3855

Name of the Vulnerable Software and Affected Versions FortiMail versions prior to 6.4.4 Description The issue is related to the improper neutralization of special elements used in an OS command in the administrative interface of FortiMail. This could allow a remote attacker to execute arbitrary...

Critical Bug in VMWare Carbon Black Allows Takeover

A critical security vulnerability in the VMware Carbon Black Cloud Workload appliance would allow privilege escalation and the ability to take over the administrative rights for the solution. The bug CVE-2021-21982 ranks 9.1 out of 10 on the CVSS vulnerability-severity scale. The VMware Carbon...