2997 matches found
CVE-2020-10590
CVE-2020-10590 affects Replicated Classic 2.x. The issue is an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (8800) on a Replicated Classic server could retrieve the TLS keypair (certif...
CVE-2020-10590
Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port 8800 on the Replicated Classic server could retrieve the TLS Keypair Cert and Key used to configure...
The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic arises from insufficient validation of input data. This allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-26799
CVE-2021-26799 affects Omeka Classic up to version 2.7, with a Cross Site Scripting (XSS) vulnerability in the admin/files/edit path that lets remote attackers inject arbitrary web script or HTML. The connected documents confirm the affected product and vulnerable component, but do not provide ex...
Omeka Classic 跨站脚本漏洞
Omeka Classic is a web publishing platform for sharing digital collections and creating media-rich online exhibitions. A cross-site scripting vulnerability exists in Omeka Classic = 2.7, which allows remote attackers to inject arbitrary web script or HTML...
Exploit for Classic Buffer Overflow in Microsoft
CVE-2017-7269 iis6 exploit 2017 !imagehttps:/...
Exploit for Classic Buffer Overflow in Microsoft
CVE-2017-7269 iis6 exploit 2017 !imagehttps:/...
Authentication flaw
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...
Remote code execution
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The...
CVE-2021-33542
CVE-2021-33542 affects Phoenix Contact Classic Automation Worx Software Suite
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 安全漏洞
The Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 are industrial control devices from Phoenix Contact, Germany. The protocol configuration for device management and communication does not include authentication measures. Phoenix Contact Classic Line Controllers versions ILC1x0 and...
CVE-2021-21257
Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...
Out-of-bounds
Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...
CVE-2021-21257
Contiki-NG prior to version 4.6 is affected by CVE-2021-21257 due to an out-of-bounds write in the RPL-Classic and RPL-Lite implementations. The bug occurs in rpl_ext_header_srh_update where addr_ptr is derived from an unvalidated CMPR field in the RPL source routing header, enabling out-of-bound...
CVE-2021-21257 Out-of-bounds write in RPL-Classic and RPL-Lite
Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing header This makes it possible for an...