844 matches found
Command injection
A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbitrary commands, as root, via shell metacharacters in the filename parameter to assets/index.php...
Directory traversal
In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an attacker to read any file via a specialized URL...
CVE-2021-38613
The CVE-2021-38613 entry concerns NASCENT RemKon Device Manager 4.0.0.0, where the assets/index.php Image Upload feature allows an attacker to upload arbitrary code and achieve remote code execution. This is driven by the documented vulnerability in the image upload function, enabling network-bas...
CVE-2021-38613
The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target system and achieve remote code execution...
CVE-2021-38612
The CVE-2021-38612 entry concerns NASCENT RemKon Device Manager version 4.0.0.0. A directory traversal flaw exists in the log-reading function at maintenance/readLog.php, enabling an attacker to read arbitrary files via a specially crafted URL. Public references (NVD, Red Hat, CVE listings, and r...
CVE-2021-38612
In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an attacker to read any file via a specialized URL...
CVE-2021-38611
Summary: CVE-2021-38611 is a command-injection vulnerability in the NASCENT RemKon Device Manager 4.0.0.0 Image Upload feature. The flaw allows an attacker to execute arbitrary commands as root by supplying shell metacharacters in the filename parameter to assets/index.php. Multiple connected rec...
NASCENT RemKon Device Manager 路径遍历漏洞
NASCENT RemKon Device Manager is a NASCENT web application deployed in logistics centers as a single management platform for managing various settings and configurations of Automatic Gate Systems AGS and other Nascent products. A security vulnerability exists in NASCENT RemKon Device Manager...
NASCENT RemKon Device Manager 代码问题漏洞
NASCENT RemKon Device Manager is an automated access control system solution. A remote code execution vulnerability exists in NASCENT RemKon Device Manager version 4.0.0.0, which stems from the asset/index.php image upload function in the software, which does not effectively restrict or validate...
NASCENT RemKon Device Manager 命令注入漏洞
NASCENT RemKon Device Manager is a NASCENT web application that is deployed in logistics centers as a single management platform for managing various settings and configurations for Automatic Gate Systems AGS and other Nascent products. A security vulnerability in NASCENT RemKon Device Manager...
Cisco Firepower Device Manager On-Box Software RCE (cisco-sa-fdm-rce-Rx6vVurq)
According to its self-reported version, Cisco Firepower Device Manager FDM On-Box software is affected by a vulnerability in the REST API that allows an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to...
The vulnerability of the REST API implementation in software for managing Cisco Firepower Device Manager On-Box allows a attacker to execute arbitrary code or perform arbitrary commands.
The vulnerability of the REST API implementation in software for managing Cisco Firepower Device Manager On-Box is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or run arbitrary code using a specially crafted HTTP request...
CVE-2021-1518
A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...
CVE-2021-1518 Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability
A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...
CVE-2021-1518 Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability
A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...
Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability
A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...
Cisco Firepower Device Manager 代码注入漏洞
Cisco Firepower Device Manager FDM is a firewall device manager from Cisco USA. The product supports access rule configuration, system monitoring, and other functions. A code injection vulnerability exists in Cisco Firepower Device Manager, which can be exploited by an authenticated, remote...
The vulnerability of the ASDM Launcher, a tool for managing Cisco Adaptive Security Device Manager (ASDM) network interfaces, allows a hacker to execute arbitrary code.
The vulnerability of the ASDM Launcher, the application for managing Cisco Adaptive Security Device Manager switches, is related to improper code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
USN-4979-1: Linux kernel vulnerabilities
Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...
The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software allows a hacker to trigger a maintenance failure.
The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...