1530 matches found
WAVLINK WL-WN530HG4 安全漏洞
WAVLINK WL-WN530HG4 is a wireless network signal extender from China RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WL-WN530HG4 M30HG4.V5030.201217 version, which stems from an access control issue that allows an unauthenticated attacker to download configuration data a...
WAVLINK WL-WN530H4 安全漏洞
WAVLINK WL-WN530H4 is a router from China RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WL-WN530H4 M30H4.V5030.210121 version, which originates from an access control issue in the component /cgi-bin/ExportLogs.sh, and can be exploited by an attacker to download configurati...
PT-2023-7363 · Hgiga · Hgiga Powerstation
Name of the Vulnerable Software and Affected Versions: HGiga PowerStation affected versions not specified Description: The issue is related to a lack of authentication for a critical function due to insufficient protection of service data, which can allow a remote attacker to gain unauthorized...
CVE-2023-20026
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input with...
Input validation
A vulnerability in the web-based management interface of Cisco Small Business Routers RV042 Series could allow an authenticated, remote attacker to inject arbitrary commands on an affected device. This vulnerability is due to improper validation of user input fields within incoming HTTP packets. ...
CVE-2023-20026
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320 and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input with...
instack-undercloud: rsync leaks information to undercloud
An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...
CVE-2022-20934
A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...
CVE-2022-20934
A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...
CVE-2022-20934
A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...
PT-2022-24215 · Unknown · Upsmon Pro
Name of the Vulnerable Software and Affected Versions: UPSMON PRO affected versions not specified Description: The UPSMON PRO configuration file stores user passwords in plaintext under a public user directory. A remote attacker with general user privileges can access all users' and administrator...
Powercom UPSMON PRO 安全漏洞
Powercom UPSMON PRO is a multi-platform client-server software from Powercom that allows remote monitoring and control of UPS via SNMP, HTTP and UDP. A security vulnerability exists in Powercom UPSMON PRO, which is caused by a configuration file that stores user passwords in clear text in the...
Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...
PT-2022-5808 · Cisco · Cisco Ftd +1
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Cisco FXOS Software affected versions not specified Description: A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software cou...
Bosch VIDEOJET multi 4000 跨站脚本漏洞
Bosch VIDEOJET multi 4000 is a 16-channel CCTV video encoder from Bosch. It provides best-in-class IP video performance for security camera systems. A security vulnerability exists in the Bosch VIDEOJET multi 4000 version, which stems from incomplete filtering of JavaScript code for different...
CVE-2022-41748
A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention DLP module could allow a local attacker with administrative credentials to bypass certain elements of the product's anti-tampering mechanisms on affected installations. Please note: an attacker must first obtain...
New Malware Families Found Targeting VMware ESXi Hypervisors
Threat actors have been found deploying never-before-seen post-compromise implants in VMware's virtualization software to seize control of infected systems and evade detection. Google's Mandiant threat intelligence division referred to it as a "novel malware ecosystem" that impacts VMware ESXi,...
HCL Technologies VersionVault Express Information Disclosure Vulnerability
HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from...