2971 matches found
Authentication flaw
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system...
CVE-2019-3747
Dell EMC Integrated Data Protection Appliance (IDPA) versions prior to 2.3 are affected by a stored cross-site scripting vulnerability in the Cloud DR add-on field. A remote attacker with ACM admin privileges can store malicious HTML/JavaScript, which is then executed by victim users’ browsers in...
Hardcoded credentials
In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs Network Video Recorders, which can be accessed without authentication over the network...
CVE-2019-13523
In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs Network Video Recorders, which can be accessed without authentication over the network...
CVE-2019-12664 Cisco IOS XE Software ISDN Data Leak Vulnerability
A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...
Cisco IOS XE Software ISDN Data Leak Vulnerability
A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers ISRs could allow an unauthenticated, adjacent attacker to pass IPv4 traffic through an ISDN channel prior to successful PPP authentication. The...
The vulnerability affects the Cisco Integrated Management Controller (IMC) Supervisor web interface, as well as tools for managing physical infrastructure and virtual environments from Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to execute arbitrary commands.
The vulnerability of the Cisco Integrated Management Controller IMC Supervisor web interface, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to insufficient validation of input...
Integer Overflow Vulnerability in S7hcom_x.dll Control for Siemens SIMATIC STEP 7
Siemens SIMATIC STEP 7 TIA Portal is a suite of programming software for SIMATIC controllers from Siemens, Germany. The software provides PLC programming, design option packages and advanced drive technology. An integer overflow vulnerability exists in the S7hcomx.dll control for Siemens SIMATIC...
CVE-2019-13923
A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway All versions. The integrated configuration web server of the affected device could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for ...
File Upload Vulnerability in Suntang Information Technology Laboratory Integrated Management System V6.0 Frontend
Suntang University Laboratory Resource Sharing Platform helps universities to establish a collaborative mechanism for resource sharing and laboratory opening, and provides a platform for resource allocation integration and teamwork for scientific research and innovation. A file upload vulnerabili...
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of the web interface for managing Cisco Integrated Management Controller, a remote administration software platform, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileges...
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileg...
The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to increase their privileges.
The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, is related to errors in processing substring comparisons. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted HTTP request...
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves errors during the verification of data entered by the user in the Certificate Request Service function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with ro...
The vulnerability of the configuration utility in the Cisco IMC software for remote server management, which allows a attacker to execute arbitrary commands with root privileges or cause service interruptions.
The vulnerability of the configuration tool of the Cisco IMC software for remote server management by Cisco Integrated Management Controller arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
The vulnerability of the command-line interface of the Cisco Integrated Management Controller, a remote administration tool, allows a hacker to elevate their privileges to the root level.
The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote administration software is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially crafted HTTP request...
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a perpetrator to execute arbitrary commands with root privileges.
The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root privileg...
The vulnerability of the Intelligent Infrastructure Management Interface for Server Management Platforms (IPMI) of the Cisco Integrated Management Controller software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Intelligent Infrastructure Management Interface for Server Management Platforms IPMI of Cisco’s Integrated Management Controller lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain...
The vulnerability affects the web interface for managing the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows an attacker to obtain a valid session token with administrator privileges on the target system.
The vulnerability of the Cisco Integrated Management Controller IMC Supervisor web interface, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to authentication procedures that hav...