1207 matches found
Spoofing
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability...
CVE-2022-30189 Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
...
CVE-2022-30189
CVE-2022-30189 is a Windows Autopilot Device Management and Enrollment Client spoofing vulnerability. Connected sources describe this as a spoofing flaw that could allow an attacker to masquerade as another user via the Autopilot client, with remote exploitation potential. Public mappings in the ...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
Cross site scripting
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
CVE-2022-30903
CVE-2022-30903 affects Nokia G-2425G-A Bharti Airtel routers (hardware 3FE48299DEAA, software 3FE49362IJHK42). The vulnerability is a Cross-Site Scripting (XSS) flaw accessible via the admin UI path admin → Maintenance → Device Management. The provided sources describe the issue but do not supply...
CVE-2022-30903
Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
...
The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.
The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...
PT-2022-2937 · Microsoft · Windows Autopilot +1
Name of the Vulnerable Software and Affected Versions: Windows Autopilot versions affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows Autopilot Device Management and Enrollment Client. This vulnerability is associated with errors in the...
CVE-2022-1669
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...
CVE-2022-1669
CVE-2022-1669 affects Circutor COMPACT DC-S BASIC (CIR_CDC_v1.2.17). A stack-based buffer overflow exists in the firewall function of the provisioning/management portal: an authenticated user can send a long Address value to a strcpy‑based copy without length checks, overflowing the process stack...
CVE-2022-1669 Circutor COMPACT DC-S BASIC
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...
CVE-2022-1669 Circutor COMPACT DC-S BASIC
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...
Hewlett Packard Enterprise OneView Cross-Site Scripting Vulnerability
Hewlett Packard Enterprise OneView, a software from Hewlett Packard Enterprise, facilitates automated device management for IT departments. No details of the vulnerability are currently available...
mdevctl bug fix and enhancement update
An update is available for mdevctl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mdevctl package provides a utility for managing and persisting devices in...
