12802 matches found
CVE-2024-46278
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. Multiple sources describe an XSS issue that could lead to an account takeover (Exploits: stored XSS, including a demonstrated account takeover vector). The Red Hat and CVE records confirm the vulnerability; PT-2024...
CVE-2024-46278
Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...
PT-2024-19850 · Qualcomm · Snapdragon +25
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file. This...
CVE-2024-46278
Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...
CVE-2024-46278
Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...
Diebold Nixdorf Vynamic View Console 代码问题漏洞
Diebold Nixdorf Vynamic View Console is a Diebold Nixdorf system that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A code issue vulnerability exists in Diebold Nixdorf Vynamic View Console versions prior to 5.9.5 that stems from an...
Diebold Nixdorf Vynamic View Console 信息泄露漏洞
Diebold Nixdorf Vynamic View Console is a Diebold Nixdorf system that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. An information disclosure vulnerability exists in Diebold Nixdorf Vynamic View Console versions prior to 5.9.5, which ste...
PT-2024-31944 · Teedy · Teedy
Name of the Vulnerable Software and Affected Versions: Teedy version 1.11 Description: The issue is related to Cross Site Scripting XSS via the management console. This allows for potential account takeover. Recommendations: For Teedy version 1.11, as a temporary workaround, consider restricting...
RHEL 8 / 9 : OpenShift Container Platform 4.15.35 (RHSA-2024:7182)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7182 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
Security Bulletin: IBM WebSphere Application Server is vulnerable to stored cross-site scripting (CVE-2024-45073)
Summary IBM WebSphere Application Server is vulnerable to stored cross-site scripting in the administrative console. Vulnerability Details CVEID:CVE-2024-45073 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user t...
CVE-2024-8449
Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password...
CVE-2024-8449 PLANET Technology switch devices - Local users' passwords recovery through hard-coded credentials
Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password...
PLANET switch devices 信任管理问题漏洞
PLANET switch devices are a family of switch devices from PLANET Corporation in China. A trust management issue vulnerability exists in PLANET switch devices that stems from hard-coded credentials in the password recovery feature, allowing an unauthenticated attacker to connect to the device via...
PT-2024-39019 · Planet Technology · Planet Technology Switch
Name of the Vulnerable Software and Affected Versions: PLANET Technology switches affected versions not specified Description: The issue concerns a hard-coded credential in the password recovering functionality of certain switch models from PLANET Technology. This allows an unauthenticated attack...
TMsoft MyAuth Gateway 跨站脚本漏洞
TMsoft MyAuth Gateway is an authentication gateway from TMsoft. A cross-site scripting vulnerability exists in TMsoft MyAuth Gateway 3, which stems from improper manipulation of the parameter console/nocache/cmd and can easily lead to cross-site scripting attacks...
CVE-2024-43692
An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly...
CVE-2024-43692
An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly...
CVE-2024-45066
A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...