The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow a malicious actor to trigger service failures or execute arbitrary codes remotely...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Identity Services Engine’s web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web interface of the Cisco TelePresence Management Suite’s centralized video system management software allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface of the Cisco TelePresence Management Suite software for centralized video system management is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to perform cross-site forgery attacks.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform inter-site forged requests...

Shihonkanri Plus GOOUT vulnerable to OS command injection

Overview Shihonkanri Plus GOOUT provided by EKAKIN is a CGI that enables to view data stored in Shihonkanri Plus outside. Shihonkanri Plus GOOUT contains an OS command injection CWE-78 vulnerability. During the meeting of Committee for authorizing the disclosure of unresolved vulnerabilities held...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2020-0883

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881...

rConfig SQL Injection Vulnerability (CNVD-2020-16098)

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in the web interface of rConfig 3.94 and earlier versions. An attacker can exploit this vulnerability with a SQL injection attack via the commands.inc.php searchColumn parameter...

CVE-2019-20500

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=configsave configBackup or downloadServerip parameter...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a hacker to re-write files in the basic file system.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...

The vulnerability in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allows a perpetrator to disclose protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine administration platform is related to lack of access control. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created URL address...

The vulnerability of Google Chrome’s browser extensions allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s browser extensions’ web interface is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause a service failure through a specially created HTML page...

Remote Code Execution Vulnerability in O2OA System in*** Interface

O2OA is an open source and free enterprise and team office platform , providing portal management , process management , information management , data management four platforms , set of work reports , project collaboration , mobile OA , document sharing , process approval , data collaboration and...

CVE-2020-3114

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of...

Ubiquiti Inc.: Readonly to Root Privilege Escalation on EdgeSwitch

An authenticated read-only user can execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges. These vulnerabilities were found on EdgeSwitch 1G switch ESWH and EdgeSwitch 10G switch ESGH firmware v1.9.0. The fix for these vulnerabilities were included in the...

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information, affect data integrity, or execute arbitrary commands on the underlying operating system.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to input validation errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information, compromise data integrity, or...

The vulnerability in the web interface of the Cisco Webex Video Mesh software allows a malicious actor to execute arbitrary commands.

The vulnerability of the Cisco Webex Video Mesh software control web interface is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...