AudioCodes Device Manager Express 命令注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A command injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from remot...

AudioCodes Device Manager Express SQL注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A SQL injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which originates from an...

AudioCodes Device Manager Express 跨站脚本漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A cross-site scripting vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which originates fr...

AudioCodes Device Manager Express 路径遍历漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A path traversal vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from a path...

AudioCodes Device Manager Express SQL注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A SQL injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from an...

Device Manager Express 7.8.20002.47752 SQL Injection / XSS / Code Execution / Traversal

Product Name: Device Manager Express Vendor Homepage: https://www.audiocodes.com Software Link: https://www.audiocodes.com/solutions-products/products/management-products-solutions/device-manager Version: = 7.8.20002.47752 Tested on: Windows 10 / Server 2019 Default credentials: admin/admin...

K71712132: BIG-IQ vulnerability CVE-2019-6653

Security Advisory Description Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ system. The attack can be stored by users granted the Device Manager and Administrator roles. CVE-2019-6653 Impact The attacker can exploit this vulnerability to access the sensitive data f...

PT-2023-9790 · Visteon · Visteon Infotainment System

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment System affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of the Visteon Infotainment system. Authentication is not required to...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

Privilege escalation

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

ZOHO ManageEngine Mobile Device Manager Plus 安全漏洞

ZOHO ManageEngine Mobile Device Manager Plus is an enterprise mobile device management MDM software from ZOHO, Inc. It can be used to manage and protect Apple, Android, Windows and Chrome OS devices. A security vulnerability exists in ZOHO ManageEngine Mobile Device Manager Plus versions prior to...

CVE-2022-41339

The vulnerability CVE-2022-41339 affects Zoho ManageEngine Mobile Device Manager Plus (prior to version 10.1.2207.5). In the User Administration module, a privilege-escalation flaw exists that could allow a user with low privileges to gain higher access (impacting confidentiality, integrity, and ...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

CVE-2022-41339

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...

PT-2022-25817 · Zoho · Zoho Manageengine Mobile Device Manager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Mobile Device Manager Plus versions prior to 10.1.2207.5 Description: The issue allows privilege escalation through the User Administration module. Recommendations: For versions prior to 10.1.2207.5, update to version...

CVE-2022-43495 An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardwaredevicemanager when joining a network. Network attakcers can send an abonormal packet when joining a network, cause a nullptr reference and device reboot...

OpenHarmony 代码问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2 and earlier versions, which stems from a DOS vulnerability in the Distributed Hardware Device Manager when...

PT-2022-26944 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is related to a DOS vulnerability in the distributedhardware device manager when joining a network. Network attackers can send an abnormal packet, causing a nullptr reference and...

Excessive grant frame usage in Windows xenbus drivers after version 9.1.3

A VM with 2 VBD, 8 vCPUs, 7 VIFs may consume over 90 grant tables, but ONLY consume 26grant tables when running with xen PV driver version 9.1.2. It will lead to virtual NIC initialization failure issue after Windows VM startup. Device manager shows NICs are notinitialized: Setupapi.log : Device...