2309 matches found
CVE-2022-26482
Poly EagleEye Director II (pre-2.2.2.1) exposes an OS command injection via os.system that can be performed by an admin. Affected product/version: Poly EagleEye Director II prior to 2.2.2.1. Impact (per NVD): high severity (CVSSv3.1 base score 7.2) with high confidentiality, integrity, and availa...
CVE-2022-26482
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin...
CVE-2022-26479
Poly EagleEye Director II (pre-2.2.2.1) contains an authentication bypass vulnerability where the existence of a certain file (creatable via an rsync backdoor) causes all API calls to run with admin privileges. Affected component/file path is unspecified in the initial documents; root cause is an...
CVE-2022-26479
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file which can be created via an rsync backdoor causes all API calls to execute as admin without authentication...
Get to Know Fred House
Meet Fred House Senior Director, Product Detection and Research By Trellix · July 12, 2022 This blog was written by Michael Alicea At Trellix, we celebrate and champion our people. For a long time now, I’ve been looking forward to connecting with Fred House, a Senior Director at Trellix Threat La...
CVE-2020-21161
Cross Site Scripting XSS vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0...
CommScope Ruckus Wireless ZoneDirector 跨站脚本漏洞
CommScope Ruckus Wireless ZoneDirector is a centrally managed Smart Wireless LAN WLAN system from CommScope USA. A security vulnerability exists in Ruckus Wireless ZoneDirector version 9.8.3.0. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...
Malicious code in com.unity.modules.director (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b1fbae24707ef1bcb5c472e84cdbfd213f93f77fc6dc0c4bdd6e4d3d74c8796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2073 Malicious code in com.unity.modules.director (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b1fbae24707ef1bcb5c472e84cdbfd213f93f77fc6dc0c4bdd6e4d3d74c8796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Poly EagleEye Director II 2.2.1.1 Command Injection / Authentication Bypass Vulnerability
======================================================================= title: Multiple Critical Vulnerabilities product: Poly EagleEye Director II vulnerable version: 2.2.1.1 Jul 1, 2021 fixed version: 2.2.2.1 or higher CVE number: CVE-2022-26479, CVE-2022-26482 impact: critical homepage:...
Poly EagleEye Director 操作系统命令注入漏洞
Poly EagleEye Director is a conference camera system with automated people tracking from Poly USA. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from...
Poly EagleEye Director 操作系统命令注入漏洞
Poly EagleEye Director is a conference camera system with automated people tracking capabilities from Poly, Inc. An operating system command injection vulnerability exists in Poly EagleEye Director II version 2.2.1.1, which stems from the presence of multiple authenticated remote command injectio...
Cisco UCS Director Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)
Cisco UCS Director is affected by the following critical vulnerability in the Apache Log4j Java logging library as described in the cisco-sa-apache-log4j-qRuKNEbd advisory. - Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in configuration, log messages, and...
CVE-2022-20765
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...
CVE-2022-20765
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...
Cross site scripting
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...
CVE-2022-20765 Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...
CVE-2022-20765 Cisco UCS Director JavaScript Cross-Site Scripting Vulnerability
A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...
CVE-2022-20765
Cisco UCS Director web applications are vulnerable to Cross-Site Scripting (XSS) due to unsanitized user input. An authenticated, remote attacker could submit crafted JavaScript, potentially rewriting page content, accessing sensitive information stored in the apps, and altering form data. A Cisc...