The vulnerability of the application software interface of the software platform for managing security in industrial networks, MXSecurity, allows a perpetrator to enhance their privileges.

The vulnerability of the application software interface of the MXSecurity software platform for managing security in industrial networks is related to the possibility of using pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotel...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, and 8800 exists due to the possibility of inserting commands that allow a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the web-based management interface for Microprogramming Software-based Cisco IP Phones 6800, Cisco IP Phone 7800, and Cisco IP Phone 8800 is related to the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with...

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the application programming interface of the IAM and SSO Casdoor platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application programming interface of the IAM and SSO Casdoor platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected...

CVE-2023-20085

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability is due to...

CVE-2023-22860

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

CVE-2023-0936

A vulnerability was found in TP-Link Archer C50 V2160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The...

PT-2023-1798 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to a cross-site scripting vulnerability in the web interface of the platform, which can be exploited by an attacker to execute arbitrary JavaScript code,...

SUSE CVE-2018-18836

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of webclientapirequestv1data in web/api/webapiv1.c...

The vulnerability in the web interface for managing Cisco BroadWorks Application Server, Cisco BroadWorks Xtended Services Platform, and BroadWorks Application Delivery Platform allows a attacker to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco BroadWorks Application Server, Cisco BroadWorks Xtended Services Platform, and BroadWorks Application Delivery Platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a...

The vulnerability in the web interface of the IBM InfoSphere Information Server’s data integration software allows a perpetrator to execute arbitrary JavaScript code and gain unauthorized access to protected information.

The vulnerability of the web interface of the IBM InfoSphere Information Server software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and gain...

The vulnerability of the Google Chrome browser’s WebUI user interface allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

CVE-2021-37234

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API...

PT-2023-16417 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04b01 Description: A critical issue has been found in the Web Interface component of the affected software, specifically in an unknown function of the file ping.ccp. This issue leads to command injection and can ...

CVE-2022-32517

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to trick the interface user/admin into interacting with the application in an unintended way when the product does not implement restrictions on the ability to render within frames ...

The vulnerability of the web interface of the microprogramming software for Cisco IP Phones 7800 and Cisco IP Phone 8800 allows a malicious individual to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the web interface of Cisco IP Phones 7800 and 8800 microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information and increase their privileges...

CVE-2023-20058

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...

The vulnerability in the web interface of the software for managing SINEC INS network infrastructure allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing software for managing network infrastructure SINEC INS exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading arbitrar...

Cisco Small Business RV340 和 RV345 操作系统命令注入漏洞

The Cisco Small Business RV340 and the Cisco Small Business RV345 are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. The Cisco Small Business RV340 is a router, a hardware device that connects two or more networks and acts as a gateway between them.The Cisco Small Busines...

PT-2023-1277 · Cisco · Cisco Small Business Rv260 +4

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV160 and RV260 Series VPN Routers affected versions not specified Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W affected versions not specified Description: A vulnerability in the web-based management...