3660 matches found
CVE-2022-46350: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. The integrated web server could...
CVE-2022-45937
A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, TALON TC Compact BACnet All versions V3.5.5, TALON TC...
CVE-2021-46846
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5...
CVE-2021-46846
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5...
Hewlett Packard Enterprise Integrated Lights-Out 跨站脚本漏洞
Hewlett Packard Enterprise Integrated Lights-Out is a remote control solution from Hewlett Packard Enterprise. The solution enables remote monitoring and operation of IT assets such as servers. A security vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out. An attacker could...
CVE-2022-46166 Spring Boot Admins integrated notifier support allows arbitrary code execution
Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...
SQL Injection Vulnerability in the Unified Management System of Shanghai Inlitech Digital Technology Co.
Ltd. is a company whose business scope includes engaging in technology development in the fields of digital technology, network technology and integrated circuit technology. A SQL injection vulnerability exists in the Unified Management System of Shanghai Inalways Digital Technology Co., Ltd, whi...
Logic Flaw Vulnerability in Intelligent IOT Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2023-04211)
Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the Intelligent IOT Integrated Management Platform of Zhejiang Dahua Technology Co. Ltd, which can be exploited by an...
PT-2025-37574
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference issue exists in the az6027 i2c xfer function when msgi.addr is 0x99, specifically when msgi.len is 0 and msgi.buf is null. This can lead to a general protectio...
CVE-2022-36785
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
Authorization
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
CVE-2022-36785
CVE-2022-36785 affects D-Link G Integrated Access Device4. Public sources describe an information-disclosure and authorization-bypass vulnerability where the web interface does not properly validate client-side identity variables, allowing access to admin credentials via the setupWizard.asp URL a...
D-Link G integrated Access Device4 安全漏洞
The D-Link G integrated Access Device4 is an integrated device from China-based AUO D-Link. A security vulnerability exists in D-Link G integrated Access Device4. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
CVE-2022-36785: Incorrect Authorization
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setupWizard.asp" ; "admin" – contains defaul...
kernel: media: usb: go7007: s2250-board: fix leak in probe()
In the Linux kernel, the following vulnerability has been resolved: media: usb: go7007: s2250-board: fix leak in probe Call i2cunregisterdeviceaudio on this error path...
CVE-2021-46846
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5...
CVE-2021-46846
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5...
CVE-2021-46846: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5...
The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC), a device for remote administration of servers, allows a perpetrator to cause a service failure.
The vulnerability of the Web interface for managing Cisco Integrated Management Controllers involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted HTTP request...
CVE-2020-8976
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request...