The vulnerability of Huawei FusionCube’s supervisor, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to disclose protected information.

The vulnerability of Huawei FusionCube relates to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information through a specially crafted HTTP request...

The vulnerability of the HTTP(S) server of the CodeMeter license management application allows a perpetrator to trigger a service failure.

The vulnerability of the HTTPS server in the CodeMeter license management application of CmWAN lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted HTTPS request...

The vulnerability of the RouterOS operating system’s web server allows a hacker to execute arbitrary code. This vulnerability exists in MikroTik routers.

The vulnerability in the RouterOS web server of the MikroTik operating system involves the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP requests...

PT-2022-7088

Name of the Vulnerable Software and Affected Versions Ghost Foundation Ghost version 5.9.4 Description A user enumeration issue exists in the login functionality, allowing a remote attacker to disclose sensitive information using a specially-crafted HTTP request. This can be triggered by sending ...

pki-core: access to external entities when parsing XML can lead to XXE

A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

The vulnerability of Moxa VPORT 06EC-2V IP camera software and Moxa VPort 461A video encoder software lies in the reading of data beyond the buffer in memory. This allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of Moxa VPORT 06EC-2V microprogrammed software for IP cameras and the Moxa VPort 461A microprogrammed software for video encoders lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Fortinet Fortigate Heap-based buffer overflow in sslvpnd (FG-IR-22-398)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-398 advisory. - A heap-based buffer overflow vulnerability CWE-122 in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 throu...

The vulnerability of the FortiWAN traffic balancing system’s web interface allows a attacker to execute arbitrary commands.

The vulnerability of the FortiWAN traffic balancing system’s web interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending speciall...

The vulnerability of the management interface of the Fortinet FortiDeceptor, which enables attackers to carry out spoofing attacks against external and internal security threats.

The vulnerability of the management interface for detecting and responding to external and internal security threats in Fortinet’s FortiDeceptor involves the lack of protective measures taken during the creation of the web page structure. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the relay_cgi.cgi script implementation in the microprogramming software for Dingtian DT-R002’s relay devices allows a hacker to bypass security restrictions and gain full control over the device.

The vulnerability of the relaycgi.cgi script implementation in Dingtian DT-R002 microprogramming software relates to exploiting the capture-replay technique to bypass authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions and gain ful...

VulnCheck KEV: CVE-2022-42475

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests...

Spitfire CMS 1.0.475 PHP Object Injection Vulnerability

Spitfire CMS version 1.0.475 is prone to a PHP object injection vulnerability due to the unsafe use of unserialize function. A potential attacker, authenticated, could exploit this vulnerability by sending specially crafted requests to the web application containing malicious serialized input...

sdk-server: Denial of Service

A flaw was found in the Eclipse Milo SDK Server. This flaw allows an attacker to consume the application memory, leading to a denial of service by sending specific requests...

PT-2022-6093 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: Fortinet FortiADC versions 6.2.4 and below Fortinet FortiADC versions 7.0.0 through 7.0.2 Fortinet FortiADC version 7.1.0 Description: The issue is related to improper input validation, allowing an authenticated attacker to retrieve files wit...

Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations

A flaw was found in Undertow with EJB invocations. This flaw allows an attacker to generate a valid HTTP request and send it to the server on an established connection after removing the LASTCHUNK from the bytes, causing a denial of service...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent security restrictions and increase their privileges.

The vulnerability of the Cisco Identity Services Engine ISE web management interface is related to the failure to take measures to neutralize special elements used in the OS command line. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and enhance their...

The vulnerability in the web interface of the Cisco DNA Center allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco DNA Center’s web interface is related to errors in processing requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

Moodle 代码问题漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from insufficient validation of user-supplied input. An attacker exploiting thi...

FileCloud 安全漏洞

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version 20.2 and later...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to upload arbitrary files.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending specially crafted HTTP requests...