Lucene search
+L

934 matches found

CNNVD
CNNVD
added 2022/09/28 12:0 a.m.20 views

Cisco vManage 访问控制错误漏洞

Cisco vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco vManage suffers from an Access Control Error vulnerability that stems from the GUI being accessible on a self-managed clo...

5.3CVSS5.8AI score0.00687EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 4:23 a.m.17 views

Security Bulletin: IBM SONAS fix available for Cross Frame Scripting vulnerability via Graphical User Interface (CVE-2013-5376)

Abstract An issue in IBM SONAS allows remote attackers to access the system as an authorized administrative user. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-5376 DESCRIPTION: An error in the IBM SONAS Graphical User Interface results in a Cross Frame Scripting vulnerability which can be used...

4.3CVSS5.8AI score0.00931EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 4:23 a.m.22 views

Security Bulletin: Storwize V7000 Unified Fix Available for Code Injection via Command Line Interface and Graphical User Interface (CVE-2012-2163)

Abstract Storwize V7000 Unified has a vulnerability that allows the administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the Storwize V7000 Unified Command Line Interface and the Graphical User...

9CVSS6.5AI score0.02228EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 4:23 a.m.17 views

Security Bulletin: SONAS Fix Available for Code Injection via Command Line Interface and SONAS Graphical User Interface (CVE-2012-2163)

Abstract SONAS has a vulnerability that allows SONAS administrative users to execute commands as root. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-2163 DESCRIPTION: An error in the command execution of the SONAS Command Line Interface and the SONAS Graphical User Interface could be leveraged ...

9CVSS6.3AI score0.02228EPSS
SaveExploits0Affected Software1
Fedora
Fedora
added 2022/09/16 1:40 a.m.38 views

[SECURITY] Fedora 36 Update: kdiskmark-3.1.0-1.fc36

KDiskMark is an HDD and SSD benchmark tool with a very friendly graphical user interface. KDiskMark with its presets and powerful GUI calls Flexible I/O Tester and handles the output to provide an easy to view and interpret comprehensive benchmark result...

7.8CVSS7.6AI score0.00355EPSS
SaveExploits1
Fedora
Fedora
added 2022/09/08 11:7 a.m.38 views

[SECURITY] Fedora 35 Update: insight-13.0.50.20220502-1.fc35

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

6.5CVSS2AI score0.01095EPSS
SaveExploits0
Citrix
Citrix
added 2022/08/23 12:0 a.m.11 views

Error: User not authorized to execute this command when executing commands via CLI or GUI

Local User Receives:ERROR: Not authorized to execute this commandon CLI and in GUI. CLI GUI...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.22 views

Fedora: Security Advisory for golang-github-google-pprof (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.39 views

[SECURITY] Fedora 35 Update: golang-github-google-pprof-0-16.20210802gitc50bf4f.fc35

Pprof is a tool for visualization and analysis of profiling data. Pprof reads a collection of profiling samples in profile.proto format and generates reports to visualize and help analyze the data. It can generate both text and graphical reports through the use of the dot visualization package...

9.3CVSS8.8AI score0.0995EPSS
SaveExploits4
CNVD
CNVD
added 2022/07/15 12:0 a.m.47 views

Samsung App lock authentication error vulnerability

Samsung App lock is an application for Samsung Samsung mobile devices that protects your privacy with password lock, graphical lock, and fingerprint lock.Samsung App lock suffers from an authentication error vulnerability that stems from the lack of proper authentication logic in AppLock, which c...

7.8CVSS1.9AI score0.00104EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/08 12:0 a.m.93 views

Zabbix Frontend Cross-Site Scripting Vulnerability (CNVD-2022-58412)

Zabbix Frontend is a monitoring software front-end tool from the American company Zabbix. A cross-site scripting vulnerability exists in Zabbix Frontend that stems from a graphical page that lacks checksum filters for user-supplied data and output. An authenticated attacker can exploit this...

5.4CVSS5.3AI score0.00719EPSS
SaveExploits0References1
Citrix
Citrix
added 2022/07/08 12:0 a.m.22 views

Login schema unable to be configured and the SELECT button grayed out

When configuring nFactor authentication, user is unable to select login schema xml in GUI page. The "SELECT" button is greyed out. Like below screenshot...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.11 views

Zabbix Frontend 跨站脚本漏洞

Zabbix Frontend is a monitoring software front-end tool from the American company Zabbix. A cross-site scripting vulnerability exists in Zabbix Frontend that stems from a graphical page that lacks checksum filters for user-supplied data and output. An authenticated attacker can exploit this...

5.4CVSS5.4AI score0.00719EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.10 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01269EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.9 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01269EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.9 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01269EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.10 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01269EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.9 views

The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.

The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...

10CVSS8.2AI score0.01112EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.11 views

The vulnerability of the IGSSdataServer.exe executable file of the Data Server module in the Interactive Graphical SCADA System (IGSS) allows a intruder to execute arbitrary code by sending a specially crafted message, due to a buffer overflow in the stack.

The vulnerability of the IGSSdataServer.exe executable file of the Data Server module in the Interactive Graphical SCADA System IGSS is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted message...

10CVSS8.5AI score0.01204EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.8 views

多款Dell产品安全漏洞

Dell Unity and Dell UnityXT are both products of Dell Incorporated Dell, U.S.A. Dell Unity is a set of virtual Unity storage environments.Dell UnityXT is a set of virtual Unity storage environments. A security vulnerability exists in Dell Unity, Dell UnityVSA, and Dell Unity XT versions prior to...

10CVSS8.3AI score0.01891EPSS
SaveExploits0References2
Rows per page
Query Builder