791 matches found
Code injection
TP-Link TL-WA850RE Wi-Fi Range Extender before v6200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges...
CVE-2022-22922
The CVE-2022-22922 entry concerns the TP-Link TL-WA850RE Wi‑Fi Range Extender. Affected version: v6_200923 and earlier. Root cause: usage of highly predictable and easily detectable session keys, enabling a remote attacker to gain administrative privileges. Impact: administrative access compromis...
CVE-2022-22922
TP-Link TL-WA850RE Wi-Fi Range Extender before v6200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges...
Tp-link TL-WA850RE 安全特征问题漏洞
The Tp-link TL-WA850RE is a 300Mbps wireless LAN repeater from Tp-link, China. It enhances WiFi signals to reach locations that routers cannot reach, while reducing interference.A security vulnerability exists in versions prior to TP-Link TL-WA850RE v6 200923, which stems from the fact that Wi-Fi...
Fortinet FortiExtender Command Injection Vulnerability
Fortinet FortiExtender is a wireless WAN extender appliance from Fortinet, Inc. A command injection vulnerability exists in Fortinet FortiExtender, which can be exploited by an authenticated attacker to execute privileged shell commands via CLI commands...
Security Bulletin: IBM MaaS360 Cloud Extender and Modules have various vulnerabilities (CVE-2021-22924, CVE-2021-3712)
Summary A vulnerability contained within a 3rd party component was identified and remediated in the IBM MaaS360 Cloud Extender Agent V2.106.100.008 and Modules. Vulnerability Details CVEID: CVE-2021-22924 DESCRIPTION: An unspecified error with bad connection reused due to improper path name...
ToTolink Ex200 Command Injection Vulnerability
ToTolink Ex200 is a 2.4G wireless N-range extender from ToTolink China. It is designed to extend the coverage of existing Wi-Fi networks and eliminate "blind spots". The ToTolink Ex200 suffers from a command injection vulnerability, which arises from the failure of a network system or product to...
TotoLink Ex200命令注入漏洞
ToTolink Ex200 is a 2.4G wireless N-range extender from ToTolink China. It is designed to extend the coverage of existing Wi-Fi networks and eliminate "blind spots". The ToTolink Ex200 suffers from a command injection vulnerability, which arises from the failure of a network system or product to...
CVE-2021-45648
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164, EX6400v2 before 1.0.0.146, EX6410 before 1.0.0.146, EX6420 before 1.0.0.146, EX7300 before 1.0.2.164,...
Netgear RBR750和NETGEAR 跨站脚本漏洞
Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between them. A security vulnerability exists in NETGEAR devices that are affected by stored cross-site...
Security Bulletin: Vulnerability in Apache Log4j (CVE-2021-44228) affects MaaS360 Enterprise Gateway
Summary There is a vulnerability in the Apache Log4j open source library. This library is not used within the MaaS360 Enterprise Gateway code, but is contained within the package of the MaaS360 Enterprise Gateway module. The Enterprise Gateway module is contained within the MaaS360 Cloud Extender...
IBM Standards Processing Information Disclosure Vulnerability
Ibm Standards Processing Engine Ibm Transformation Extender Advanced is a document conversion software from the American company Ibm. Used to automatically convert and validate large amounts of data. A security vulnerability exists in IBM Standards Processing that stems from the engine not settin...
Command Execution Vulnerability in TOTOLINK EX200
The TOTOLINK EX200 is a wireless extender. A command execution vulnerability exists in TOTOLINK EX200, which can be exploited by an attacker to gain control of a server...
CVE-2021-29883
IBM Standards Processing Engine IBM Transformation Extender Advanced 9.0 and 10.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. T...
CVE-2021-29883
IBM Standards Processing Engine IBM Transformation Extender Advanced 9.0 and 10.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. T...
CVE-2021-29883
CVE-2021-29883 affects IBM Standards Processing Engine (IBM Transformation Extender Advanced) 9.0 and 10.0, where authorization tokens and session cookies are set without the Secure attribute. This allows cookie leakage when users visit or click links over HTTP, potentially exposing cookie values...
CVE-2021-29883: Missing Encryption of Sensitive Data
IBM Standards Processing Engine IBM Transformation Extender Advanced 9.0 and 10.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. T...
PT-2021-18532
Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced versions 9.0 through 10.0 Description The issue arises because the secure attribute is not set on authorization tokens or session cookies. This allows attackers to potentially obtain cookie values by sendin...
Security Bulletin: Session Cookie Vulnerablity Affects IBM Transformation Extender Advanced (CVE-2021-29883)
Summary IBM Standards Processing Engine, also known as IBM Transformation Extender Advanced, has addressed insecure attribute on authorization tokens or session cookies. Vulnerability Details CVEID: CVE-2021-29883 DESCRIPTION: IBM Standards Processing Engine does not set the secure attribute on...
CVE-2021-29883
IBM Standards Processing Engine IBM Transformation Extender Advanced 9.0 and 10.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. T...