870 matches found
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
The CVE-2021-30003 entry concerns Nokia G-120W-F devices (model 3FE46606AGAB91) with a Stored XSS vulnerability in the administrative interface, exploitable via the URL filter page parameter urlfilter.cgi?add url_address. The issue is rooted in an XSS flaw that could affect authenticated admins a...
PT-2021-18565
Name of the Vulnerable Software and Affected Versions Nokia G-120W-F version 3FE46606AGAB91 Description The issue is related to Stored XSS in the administrative interface. It can be exploited via the "urlfilter.cgi?add url address" endpoint. Recommendations For Nokia G-120W-F version...
CVE-2021-30003: Improper Neutralization of Input During Web Page Generation
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-21982
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...
Authentication flaw
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...
CVE-2021-21982
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...
CVE-2021-21982
Summary: CVE-2021-21982 affects the VMware Carbon Black Cloud Workload appliance (versions 1.0.0 and 1.0.1) and is an authentication bypass vulnerability. A malicious actor with network access to the appliance’s administrative interface can obtain a valid authentication token and, as a result, vi...
CVE-2021-21982: Improper Authentication
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful...
PT-2021-2560
Name of the Vulnerable Software and Affected Versions: VMware Carbon Black Cloud Workload appliance versions 1.0.0 through 1.0.1 Description: The issue is related to an authentication bypass vulnerability in the administrative interface of the VMware Carbon Black Cloud Workload appliance. This...
CVE-2020-25217
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 Base allows Command Injection as root in its administrative web interface...
Server side request forgery (ssrf)
A Server-side request forgery SSRF vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting XSS attack against the administrative interface via an HTTP...
PT-2021-17328
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions through 6013 Description: A Server-side request forgery SSRF vulnerability in the ProductConfig servlet allows a remote unauthenticated attacker to perform blind HTTP requests or conduct a...
Design/Logic Flaw
Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters "isAdmin" and "isPremium" located on device storage...
PT-2021-16726 · Unknown · Testes De Codigo
Name of the Vulnerable Software and Affected Versions: Testes de Codigo versions 11.4 and prior Description: The issue allows an attacker to gain access to the administrative interface and premium features by tampering with the boolean value of parameters isAdmin and isPremium located on device...
Virtuozzo Hybrid Infrastructure 4.5 (4.5.0-284)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover compute services, networking, storage core, monitoring, and the administrative user interface. Additionally,...
CVE-2020-28931: Cross-Site Request Forgery (CSRF)
Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 21.0.11 allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website...
PT-2020-17062
Name of the Vulnerable Software and Affected Versions EPSON EPS TSE Server 8 version 21.0.11 Description The issue is related to the lack of an anti-CSRF token in the administrative interface, allowing an unauthenticated attacker to force an administrator to execute external POST requests by...
