baigo CMS Cross-Site Scripting Vulnerability (CNVD-2021-53924)

baigo CMS is an open source PHP-based web content management system CMS. baigo CMS v4.0 contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web script or HTML by submitting form parameters to a public console configuration file...

baigo CMS 跨站脚本漏洞

baigo CMS is an open source PHP-based web content management system CMS. baigo CMS v4.0 contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web script or HTML by submitting form parameters to a public console configuration file...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2020-20212

Mikrotik RouterOs 6.44.5 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

CVE-2020-20211

Mikrotik RouterOs 6.44.5 long-term tree suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

Code injection

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2021-35451

Affected product: Teradici PCoIP Management Console-Enterprise 20.07.0. Vulnerability: Cross-Site Scripting (XSS) in the Web application component that allows an unauthenticated user to inject arbitrary text into a user’s browser. Impact: The provided documents describe the XSS impact as injectio...

CVE-2021-35451

In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application...

CVE-2020-20211

CVE-2020-20211 affects MikroTik RouterOS 6.44.5 (long-term) with an assertion failure in the /nova/bin/console process that can cause DENIAL OF SERVICE via a crafted packet. An authenticated remote attacker can trigger the failure. The vulnerability is documented across multiple feeds (NVD, Red H...

MikroTik RouterOS 代码问题漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A memory corruption vulnerability exists in the /nova/bin/console process in Mikrotik RouterOs version 6.44.5. An...

Teradici PCoIP Management Console 跨站脚本漏洞

Teradici PCoIP Management Console is a console application for managing PCoIP clients from Teradici Canada.A cross-site scripting vulnerability exists in Teradici PCoIP Management Console Enterprise, which could be exploited by an attacker to inject arbitrary text into a user's browser via a Web...

The vulnerability of the fly-admin-gmc-se graphical control console arises from insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-gmc-se graphical control console is related to insufficient validation of input data during the editing of category names. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Mikrotik RouterOs 安全漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. An assertion failure vulnerability exists in the /nova/bin/console process in Mikrotik RouterOs version 6.44.5. An...

PT-2021-7403 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to an integer overflow in the Qualcomm embedded platform software, which can lead to memory corruption. This can be exploited to cause a...

PT-2021-4241 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.4 Description: The issue is caused by a buffer overflow on the stack in the drivers/char/virtio console.c file of the Linux kernel. An untrusted device can trigger data corruption or loss by supplying a...

The vulnerability of the console-based graphic editor ImageMagick, related to excessive iteration, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to excessive iteration. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created mng image...

Code injection

An issue exists within the SSH console of Akkadian Provisioning Manager 4.50.02 which allows a low-level privileged user to escape the web configuration file editor and escalate privileges...

Symantec Advanced Secure Gateway 和 Symantec ProxySG 授权问题漏洞

Symantec Advanced Secure Gateway and Symantec ProxySG are both security gateway appliances from Symantec Corporation. An authorization issue vulnerability exists in Symantec Advanced Secure Gateway ASG and ProxySG web management consoles. An unauthenticated attacker could exploit this vulnerabili...

Google now requires app developers to verify their address and use 2FA

Google on Monday announced new measures for the Play Store, including requiring developer accounts to turn on 2-Step Verification 2SV, provide an address, and verify their contact details later this year. The new identification and two-factor authentication requirements are a step towards...