7003 matches found
SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day Attacks
A critical vulnerability in SonicWall VPN appliances that was believed to have been patched last year has been now found to be "botched," with the company leaving a memory leak flaw unaddressed, until now, that could permit a remote attacker to gain access to sensitive information. The shortcomin...
Unauthorized Access Vulnerability in SWW-3100BG of Samsung (China) Investment Co.
SWW-3100BG is a router from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SWW-3100BG, which can be exploited by attackers to obtain sensitive information...
CVE-2021-0533
creationtimestamp| type| source ---|---|--- 2021-06-22 02:48:29+00:00| exploited| Telegram/oUtqgOwJm3PWppe6M28qQQEAlZ2nJ-elPtm3CWDUSwcoNWQ...
Unauthorized Access Vulnerability in MX-2314N at Sharp Trading (China) Co.
The MX-2314N is a printer from Sharp Trading China Co. An unauthorized access vulnerability exists in the Sharp Trading China Ltd MX-2314N, which can be exploited by attackers to obtain sensitive information...
Weak Password Vulnerability in Pacom 8501 Input/Output Module
Pacom is a Swedish company. A weak password vulnerability exists in the Pacom 8501 Input/Output Module, which can be exploited by an attacker to gain access to the backend and obtain sensitive information...
Unauthorized Access Vulnerability in Tenda Roteador Multilaser 1200AC Devices
Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. An unauthorized access vulnerability exists in the Tenda Roteador Multilaser 1200AC device, which can be exploited by attackers to...
CVE-2021-32305
creationtimestamp| type| source ---|---|--- 2021-06-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50042 2021-09-02 09:56:23+00:00| seen| MISP/2e8cebbe-4ab2-4eb0-bd6e-e8193972cf4e 2021-09-21 04:42:27+00:00| seen| https://t.me/pwnwikizhchannel/691 2023-04-27 09:58:59+00:00|...
SQL Injection Vulnerability in TPCMS
TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Unauthorized Access Vulnerability in Network Camera WV-ST162 at Panasonic (China) Co.
Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera WV-ST162 of Panasonic China Co. which c...
Command Execution Vulnerability in IceWarp Mail Server
IceWarp Mail Server is an enterprise-grade email, collaboration and mobile solution for organizations of all sizes. A command execution vulnerability exists in IceWarp Mail Server, which can be exploited by an attacker to perform command execution by constructing malicious statements...
CVE-2021-30544
creationtimestamp| type| source ---|---|--- 2021-06-18 14:37:24+00:00| exploited| https://t.me/truesecator/1826...
Unauthorized access vulnerability in Isha's back-office management system
Isha Backend Management System is a .NET Core Web-based development system. An unauthorized access vulnerability exists in Yisha Backend Management System, which can be exploited by attackers to obtain sensitive information...
Weak Password Vulnerability in Polycom Device Management System
Founded in 1990, Polycom China is a global integrated collaborative communications company. It is a leading provider of high-quality audio and video conferencing systems and solutions. A weak password vulnerability exists in the Polycom device management system, which can be exploited by an...
PageKit Cross-Site Scripting Vulnerability
Pagekit is a modular, lightweight CMS content management system. pageKit has a cross-site scripting vulnerability, which stems from the fact that SVG files may contain malicious scripts that can be exploited by attackers to trigger XSS attacks...
Microsoft Edge (Chromium) < 91.0.864.54 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.54. It is, therefore, affected by multiple vulnerabilities as referenced in the June 18, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Unauthorized Access Vulnerability in Cisco IP Phone CP-7911G
The Cisco IP Phone CP-7911G is an IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-7911G, which can be exploited by an attacker to obtain sensitive information...
Netapp E-Series SANtricity OS Controller Software Remote Code Execution Vulnerability
Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from NetApp, Inc. A security vulnerability exists that could be exploited by a privileged attacker to execute arbitrary code...
Unauthorized Access Vulnerability in Cisco IP Phone CP-8851
The Cisco IP Phone CP-8851 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8851, which can be exploited by an attacker to obtain sensitive information...
Command Execution Vulnerability in TamronOS IPTV/VOD Systems
Weifang Home Station Electronic Technology Co., Ltd. is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV/VOD system, which can be exploited by...