685 matches found
The vulnerability of the Diagnosis Ping function in the administrative web interface of the Ethernet switch microprogramming software from Moxa, models Moxa EDS-405A and Moxa EDS-408A, allows a hacker to execute arbitrary code.
The vulnerability of the Diagnosis Ping function in the administrative web interface of Microprogrammed Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a remote attacker to execut...
The vulnerability of the administrative web interface of the Microprogrammable Ethernet switches from the Moxa EDS-405A and Moxa EDS-408A series allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the administrative web interface of Microprogramming Software for Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain...
The vulnerability of INPAS SOFT UniPORT Eslip software, related to insufficient validation of input data, allows a perpetrator to gain access to the application’s administrative web interface.
The vulnerability of INPAS SOFT UniPORT Eslip software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the application’s administrative web interface remotely...
GHSA-2CWW-FGMG-4JQC Keycloak's admin API allows low privilege users to use administrative functions
Users with low privileges just plain users in the realm are able to utilize administrative functionalities within Keycloak admin interface. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data...
CVE-2024-36787
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...
CVE-2024-36787
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...
CVE-2024-36787
The CVE-2024-36787 entry concerns Netgear WNR614 routers (versions 1.1.0.54 and 1.0.1) where the authentication procedure contains weaknesses that allow bypassing authentication and gaining access to the administrative interface via unspecified vectors. The vulnerability is described across multi...
MinMax CMS 安全漏洞
MinMax CMS is a content management system. A security vulnerability exists in MinMax CMS that stems from the application containing a hidden administrator account with a fixed password that cannot be removed or disabled from the administrative interface...
CVE-2023-46714
A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests...
CVE-2023-46714
Fortinet FortiOS vulnerability CVE-2023-46714 is a stack-based buffer overflow in FortiOS 7.2.1–7.2.6 and 7.4.0–7.4.1 that allows a privileged attacker with access to the administrative interface to execute arbitrary code via crafted HTTP/HTTPS requests. In the public disclosures, the impact is d...
CVE-2023-46714
A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests...
CVE-2023-46714
A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests...
Fortinet Fortigate Buffer overflow in administrative interface (FG-IR-23-415)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-415 advisory. - A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 throu...
PT-2024-5553 · Fortinet · Fortiadc
Name of the Vulnerable Software and Affected Versions: FortiADC versions 7.4.0 through 7.4.1 FortiADC versions prior to 7.2.4 Description: The issue is related to improper access control in the administrative interface of FortiADC, allowing a remote attacker to gain write access to arbitrary file...
CVE-2022-32510
An issue in Nuki Bridge where the HTTP API admin interface was exposed over an unencrypted channel, allowing an attacker who can access the network to eavesdrop a token and impersonate a legitimate user to access the full API. Affected: Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2. Root caus...
Campcodes Online Job Finder System SQL Injection Vulnerability
Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from an SQL injection vulnerability in the id parameter of the /admin/user/index.php file...
CVE-2024-1474
In WSFTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WSFTP Server administrative interface...
CVE-2024-1474
In WSFTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WSFTP Server administrative interface...
PT-2024-1746 · Fortinet · Forticlientems
Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 7.2.0 through 7.2.2 Fortinet FortiClientEMS versions before 7.0.10 Description: The issue is related to improper privilege management, allowing a Site administrator with Super Admin privileges to perform globa...