CVE-2021-28804

CVE-2021-28804 is a remote command-injection vulnerability impacting QNAP QTS and QuTS hero. Affected: QTS < 4.5.1.1540 build 20210107; QuTS hero

CVE-2021-28803 Stored XSS Vulnerability in Q'center

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...

CVE-2021-28803

CVE-2021-28803 is a Stored XSS vulnerability in QNAP QCenter, affecting versions prior to 1.11.1004. The issue stems from insufficient protection of user data, enabling an attacker to inject and execute client-side script within QCenter. The connected CNVD/CNNVD/CCE-style records describe the sam...

CVE-2021-28802

CVE-2021-28802 is a remote command-injection vulnerability affecting QNAP QTS and QuTS hero. Affected versions: QTS < 4.5.1.1540 build 20210107 and QuTS hero

CVE-2021-28802 Command Injection Vulnerabilities in QTS and QuTS hero

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc...

CVE-2021-23275

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

Design/Logic Flaw

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

CVE-2021-23275

CVE-2021-23275 concerns a Windows Installation component in TIBCO products (TIBCO Enterprise Runtime for R – Server Edition, Spotfire Server/Analytics Platform for AWS Marketplace, Spotfire Statistics Services, and Spotfire Server components). The vulnerability stems from a lack of access restric...

Exacq Technologies exacqVision Enterprise Manager

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exacq Technologies, Inc., a subsidiary of Johnson Controls Inc. Equipment: exacqVision Enterprise Manager Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53947)

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53945)

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer overflow vulnerability, which could be...

Unauthorized Access Vulnerability in Lexmark MX611dhe

The Lexmark MX611dhe is a printer product from the American company Lexmark. The Lexmark MX611dhe has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...

CentOS 8 : container-tools:3.0 (CESA-2021:2370)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2370 advisory. - runc: vulnerable to symlink exchange attack CVE-2021-30465 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : container-tools:2.0 (CESA-2021:2291)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2291 advisory. - runc: vulnerable to symlink exchange attack CVE-2021-30465 Note that Nessus has not tested for this issue but has instead relied only on the application's...

JVN#95457785: Multiple vulnerabilities in GROWI

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. NoSQL injection CWE-943 - CVE-2021-20736 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 7.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5 Improper...

Dell NetWorker 路径遍历漏洞

Dell NetWorker is an application from Dell USA Inc. It provides forum discussion functionality for Dell Inc. A path traversal vulnerability exists in Dell NetWorker, which can be exploited by an attacker to exploit multiple vulnerabilities in Dell NetWorker...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28805 Inclusion of Sensitive Information in QSS

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

Dell OpenManage Enterprise OS Command Injection Vulnerability

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. Dell OpenManage Enterprise-Modular is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to bypass restriction...

Weak Password Vulnerability in 300M Giga Super High Power Wireless Router

Sapido Technology Inc is a branded technology company invested by Taiwan Steel Group exclusively for IoT IoT technology, specializing in the design and development of intelligent all-wireless security systems and hardware devices. A weak password vulnerability exists in the 300M Giga Super High...