The vulnerability of the HTTP-demon microprogramming software in Wi-Fi routers ZyXEL NBG6816 (Armor Z1) and NBG6817 (Armor Z2) allows a hacker to execute arbitrary commands.

The vulnerability of the HTTP daemon of the microprogrammed Wi-Fi router devices ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands using specially created malware...

The vulnerability of the application integration function for Cisco WebEx Meetings allows attackers to perform cross-site fraudulently.

The vulnerability of the application integration function for Cisco WebEx Meetings relates to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform inter-site spoofing of requests remotely...

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, and Cisco Unified Communications Manager IM & Presence Service web interfaces is related to the manipulation of inter-site requests. Exploiting this vulnerability allows...

The vulnerability of the microprogrammed software for power meters and energy counters from PowerLogic (ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800) stems from insufficient verification of the authenticity of the requests being executed. This allows attackers to perform inter-site fraudulently.

The vulnerability of microprogrammed power measurement instruments and energy counters from PowerLogic, such as ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, and PM800, stems from insufficient verification of the authenticity of the requests being sent. Exploiting this...

The vulnerability of the Docker container registry for Harbor, related to the manipulation of inter-site requests, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Docker container Harbor registry is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the built-in software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 lies in the ability to forge inter-site requests, allowing attackers to carry out CSRF attacks.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 is related to the manipulation ...

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems for transformer substations, related to the manipulation of inter-site requests, allows a perpetrator to execute malicious commands under the identity of an authorized user.

The vulnerability of the microprogrammed control module software for automation of transformer substations in Schneider Electric Easergy T300 HU250 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute malicio...

The vulnerability in the web-based management interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 allows a intruder to perform arbitrary actions on the vulnerable device.

The vulnerability in the web interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows an attacker to...

The vulnerability in the web interface of the Cisco Unified Communications Manager system allows a perpetrator to perform arbitrary actions in the context of the current user.

The vulnerability of the Cisco Unified Communications Manager’s administration web interface is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on behalf of the current user through a specially created link...

The vulnerability of the microprogramming software in the remote control system for solar panels, SMA Solar Sunny WebBox, related to the manipulation of inter-site requests, allows a intruder to increase their privileges.

The vulnerability of the microprogramming software in the SMA Solar Sunny WebBox remote control system is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a specially created malicious link...

The vulnerability of the NPAPI plugin for Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NPAPI plugin for Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of HP Deskjet printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to cause malfunctions in service or configuration of the device.

The vulnerability of HP Deskjet printer’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to cause service failures or configuration violations of the device remotely...

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software, related to the falsification of inter-site requests, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of HP Color LaserJet Pro printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to trigger a service failure.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of HP Color LaserJet Pro printer microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to compromise the confidentiality and integrity of protected information.

The vulnerability of HP Color LaserJet Pro printer microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the FindMe function in the microprogramming software of Cisco TelePresence Video Communication Server and the Cisco Expressway software allows a perpetrator to perform arbitrary actions within the vulnerable system.

The vulnerability of the FindMe function in the microprogramming software of Cisco TelePresence Video Communication Server and the Cisco Expressway software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions o...

The vulnerabilities of the Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) – platforms for high-speed data distribution by TIBCO Rendezvous – allow attackers to gain unauthorized access to protected information.

The vulnerabilities of the Rendezvous Routing Daemon rvrd, Rendezvous Secure Routing Daemon rvrsd, Rendezvous Secure Daemon rvsd, Rendezvous Cache rvcache, and Rendezvous Daemon Manager rvdm – a platform for high-speed data distribution by TIBCO Rendezvous – are related to the manipulation of...

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s software lies in errors during the checking of HTTP requests in the management interface, which allows attackers to perform inter-site forged requests.

The vulnerability of Cisco Enterprise NFV Infrastructure Software-related software lies in the improper checking of HTTP requests in the management interface. Exploiting this vulnerability allows a remote attacker to perform inter-site forged requests...

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the manipulation of inter-site requests, allowing a perpetrator to change the device’s password.

The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to remotely change the device’s password...

The vulnerability of the Cisco Firepower Extensible Operating System allows a perpetrator to gain access to the authentication data of arbitrary users.

The vulnerability of the Cisco Firepower Extensible Operating System is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication credentials of arbitrary users...