2152 matches found
CVE-2020-8087
SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...
Command injection
SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...
CVE-2020-8087
SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...
CVE-2020-8087
Summary: CVE-2020-8087 affects SMC Networks D3G0804W family devices (D3GNV5M-3.5.1.6.10 GA) where the Network Diagnostic Tools screen can be abused to execute commands remotely. The root cause is a parameter pollution flaw in goform/formSetDiagnosticToolsFmPing: the attacker supplies vlu_diagnost...
The vulnerability of the SAP Diagnostic Agent, related to the lack of protection for operational data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP Diagnostic Agent lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted query...
The vulnerability of Siemens S7-1200 microprogramming software lies in the presence of unsafe functions during physical connection via the UART interface. This allows attackers to obtain additional diagnostic information during the device loading process.
The vulnerability of Siemens S7-1200 microprogramming software is related to the presence of unsafe functions during physical connection via the UART interface. Exploiting this vulnerability can allow an attacker to obtain additional diagnostic information during the device loading process...
VulnCheck KEV: CVE-2017-6884
Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the pingip parameter to the expert/maintenance/diagnostic/nslooku...
JDK: Unrestricted access to diagnostic operations
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
JDK: Unrestricted access to diagnostic operations
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
CVE-2019-20075
On Netis DL4323 devices, pingrttv6.html has XSS Ping6 Diagnostic...
Design/Logic Flaw
On Netis DL4323 devices, pingrttv6.html has XSS Ping6 Diagnostic...
CVE-2019-20075
Netis DL4323 devices expose a cross-site scripting (XSS) vulnerability in the pingrtt_v6.html page (Ping6 Diagnostic). The issue arises from insufficient input validation in the WEB application, permitting crafted data to execute client-side code. Affected component: pingrtt_v6.html on Netis DL43...
Intel® Processor Diagnostic Tool Advisory
Summary: A potential security vulnerability in the Intel® Processor Diagnostic Tool may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11133...
CVE-2019-13945
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family V4.x incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family V4.x incl. SIPLUS variants All versions with Function State FS 11, SIMATIC S7-200 SMART CPU CR20s 6E...
JDK: Unrestricted access to diagnostic operations
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
JDK: Unrestricted access to diagnostic operations
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
BSA-2019-888
Security Advisory ID : BSA-2019-888 Component : Eclipse OpenJ9 Revision : 1.0: Final From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
CVE-2019-17631
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...
Cloudera Manager Information Disclosure Vulnerability
Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. An information disclosure vulnerability exists in the Diagnostic Support Bundles in Cloudera Manager versions prior to 5.4.6...
Cloudera CDH Information Disclosure Vulnerability
Cloudera CDH is an open source Hadoop platform from Cloudera. The platform provides scalable storage and distributed computing, as well as a Web-based user interface and other enterprise features. An information disclosure vulnerability exists in the Diagnostic Support Bundles in Cloudera CDH...