PT-2023-23852 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An arbitrary file write issue exists, allowing an authenticated, remote attacker with administrator privileges to alter logging variables. This could...

Motorola MBTS Base Radio和Motorola EBTS Base Radio 数据伪造问题漏洞

The Motorola MBTS Base Radio and Motorola EBTS Base Radio are walkie-talkies from Motorola, USA. A security vulnerability exists in the Motorola MBTS Base Radio and Motorola EBTS Base Radio that stems from an inability to check the authenticity of the firmware, allowing an authenticated attacker ...

Motorola MBTS Site Controller 数据伪造问题漏洞

The Motorola MBTS Site Controller is a device from Motorola, Inc. that is used to manage and control the Macro Base Transceiver Station MBTS and functions associated with it. A security vulnerability exists in the Motorola MBTS Site Controller that stems from an inability to check the authenticit...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0, which stems from an incorrect authorization vulnerability that allows an...

CVE-2022-43907

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...

CVE-2022-43907

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...

CVE-2023-39291

A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system...

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

CVE-2023-25649

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...

CasaOS 命令注入漏洞

CasaOS is a simple, easy-to-use, and elegant open source home cloud system. A command injection vulnerability exists in CasaOS versions prior to 0.4.4 that originates from allowing an authenticated attacker to connect to an SMB server to execute arbitrary commands...

Cisco Evolved Programmable Network Manager XSS (cisco-sa-pi-epnm-BFjSRJP5)

The version of Cisco Evolved Programmable Network Manager installed on the remote host is prior to 7.1. It is, therefore, affected by a cross-site scripting XSS vulnerability. Due to insufficient validation of user input, an authenticated, remote attacker can, by persuading a user of the affected...

CVE-2023-41028

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...

CVE-2023-41028 Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...

CVE-2023-41028 Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...

CVE-2023-20230

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to read, modify, or delete non-tenant policies for example, access policies created by users associated with a different securi...

CVE-2023-20200

A vulnerability in the Simple Network Management Protocol SNMP service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service DoS condition...

CVE-2023-20234

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command ...

PT-2023-5035 · Cisco · Cisco Application Policy Infrastructure Controller

Name of the Vulnerable Software and Affected Versions: Cisco Application Policy Infrastructure Controller affected versions not specified Description: The issue is related to improper access control in the restricted security domain implementation, allowing an authenticated, remote attacker to...

Juplink Intelligent Technologies RX4-1500 缓冲区错误漏洞

The Juplink Intelligent Technologies RX4-1500 is a wireless router from Juplink Intelligent Technologies. A buffer error vulnerability exists in the Juplink Intelligent Technologies RX4-1500 versions 1.0.2 through 1.0.5, which stems from the presence of a stack-based buffer overflow that can be...

PT-2023-27748 · Unknown · Juplink Rx4-1500

Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 versions 1.0.2 through 1.0.5 Description: A stack-based buffer overflow exists in the Juplink RX4-1500 WiFi router. An authenticated attacker can exploit this issue to achieve code execution as root. Recommendations: For...