CVE-2020-36239: Missing Authorization

Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Management Data Center from version 2.0.2 before 4.5.16, from version 4.6.0 before 4.13.8, and from version 4.14.0 before 4.17....

CVE-2020-36239

Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Management Data Center from version 2.0.2 before 4.5.16, from version 4.6.0 before 4.13.8, and from version 4.14.0 before 4.17....

Jira Data Center & Jira Service Management Data Center - Missing Authentication for Ehcache RMI - CVE-2020-36239

h3. Issue Summary Jira Data Center, Jira Core Data Center, Jira Software Data Center, and Jira Service Management Data Center exposed a Ehcache RMI network service which attackers, who can connect to the service, on port 40001 and potentially 40011 012, could execute arbitrary code of their choic...

Jira Data Center & Jira Service Management Data Center - Missing Authentication for Ehcache RMI - CVE-2020-36239

h3. Issue Summary Jira Data Center, Jira Core Data Center, Jira Software Data Center, and Jira Service Management Data Center exposed a Ehcache RMI network service which attackers, who can connect to the service, on port 40001 and potentially 40011 012, could execute arbitrary code of their choic...

PT-2020-13796

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 1.2 through 1.5 Description The issue arises when the Admin API is enabled and the Admin API access IP restriction rules are deleted in Apache APISIX. This allows the default token to access APISIX management data...

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures taken to clean data at the management level, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

CVE-2018-1668

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894...

Cisco Prime Infrastructure Authentication Bypass API Vulnerability (cisco-sa-20160629-piauthbypass) - Active Check

A vulnerability in the application programming interface API of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to access and control the API resources. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

The vulnerability of the Cisco IOS operating system, which allows a malicious individual to gain administrator privileges

Cisco IOS software contains vulnerabilities that allow a remote attacker to gain remote access to device management data via SNMP protocol. This can result in the attacker obtaining administrative privileges...

Code injection

Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 allow remote attackers to cause a denial of service device outage by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236...

CVE-2015-6311

Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 allow remote attackers to cause a denial of service device outage by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236...

CVE-2015-6311: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 allow remote attackers to cause a denial of service device outage by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236...

PT-2015-7174

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 Description The issue is a denial of service vulnerability that could allow an unauthenticated, adjacent attacker to cause a device outage by sending...

CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

PT-2015-7258

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendation...

CVE-2015-6468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2015-7260

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

CVE-2015-6470: Undefined Security Weakness

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

Empire(EmpireCMS)cms 6.6 the background to get shell-vulnerability warning-the black bar safety net

Previous 6. 5http://www.badguest.cn/Article/201011/78510.htmlsomeone hair of the method is that the background---system setup---the management data table---management system models---import new module,directly put the modified php shell was renamed the shell. php. mod uploaded, the new version us...

Empire cms backstage to get a shell vulnerability and fix-vulnerability warning-the black bar safety net

The first method: add a custom page 6.0 on experiment success Template management - add custom page - page name casually--file name: xx. asp;. html--the page content--pony copy the contents into it Save the post and then the Admin page Click you can go see your horse, generally in the root...