ABB SMU615 Improper Initialization (CVE-2021-22283)

Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion protection relays - 615 series IEC 5.0 FP1...

The vulnerability of the web configuration service of Delta Electronics DX-2100-L1-CN microprogrammed router software allows a hacker to execute arbitrary code.

The vulnerability of the web configuration service of Delta Electronics DX-2100-L1-CN microprogrammed router software exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the lform/net_diagnose component of Delta Electronics’ DX-2100-L1-CN microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the lform/netdiagnose component of Delta Electronics’ DX-2100-L1-CN router software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

SUSE CVE-2007-5162

The connect method in lib/net/http.rb in the 1 Net::HTTP and 2 Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName CN field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions v...

SUSE CVE-2009-2404

Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL servers to cause a denial of service application crash or possibly...

SUSE CVE-2009-3490

GNU Wget before 1.12 does not properly handle a '\0' character in a domain name in the Common Name field of an X.509 certificate, which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issu...

SUSE CVE-2011-3848

Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request CSR to arbitrary locations via 1 a double-encoded key parameter in the URI in 2.7.x, 2 the CN in the Subject of a CSR in 2.6 and 0.25...

SUSE CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 2, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

Directory traversal

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

Default configuration

An issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, allows attackers to gain access to the configuration interface...

ChinaMobile GPN2.4P21-C-CN 路径遍历漏洞

China Mobile ChinaMobile GPN2.4P21-C-CN is a wireless router from China Mobile. A security vulnerability exists in the ChinaMobile GPN2.4P21-C-CN. An attacker can exploit this vulnerability to access the configuration interface...

ChinaMobile GPN2.4P21-C-CN 路径遍历漏洞

China Mobile ChinaMobile GPN2.4P21-C-CN is a wireless router from China Mobile. A path traversal vulnerability exists in the ChinaMobile GPN2.4P21-C-CN. An attacker can use this vulnerability to read arbitrary files on the server running the application...

PT-2023-11490 · China Mobile · Chinamobile Plc Wireless Router

Name of the Vulnerable Software and Affected Versions: ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN version W2000EN-01 Description: An issue was discovered in the default configuration of the ChinaMobile PLC Wireless Router, allowing attackers to gain access to the configuration interface...

CVE-2020-18330

CVE-2020-18330 affects ChinaMobile PLC Wireless Router GPN2.4P21-C-CN (firmware W2000EN-01, hardware Gpn2.4P21-C_WIFI-V0.05). The default configuration allows remote attackers to gain access to the configuration interface, with CVSS v3.1 base score 9.1 (CRITICAL), no user interaction, and network...

PT-2023-11491 · China Mobile · Chinamobile Plc Wireless Router

Name of the Vulnerable Software and Affected Versions: ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN version W2000EN-01 Description: The issue is related to a directory traversal vulnerability. It can be exploited via the getpage parameter to the "/cgi-bin/webproc" API endpoint...

k68.cn Cross Site Scripting vulnerability OBB-3164936

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

power3000.cn Cross Site Scripting vulnerability OBB-3162847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cn-artistar.com Cross Site Scripting vulnerability OBB-3129799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...