6665 matches found
CVE-2021-34772 Cisco Orbital Open Redirect Vulnerability
A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...
CVE-2021-34772
The CVE-2021-34772 issue affects Cisco Orbital’s web-based management interface and is an open redirect caused by improper validation of URL paths. An unauthenticated, remote attacker can persuade a user to click a crafted URL, leading to the user being redirected to a malicious webpage. The vuln...
CVE-2021-29908
The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM X-Force ID: 207747...
CVE-2021-29908
The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM X-Force ID: 207747...
Authentication flaw
The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM X-Force ID: 207747...
CVE-2021-29908
CVE-2021-29908 affects IBM Virtualization Engine TS7700 Management Interface. A vulnerability allows unauthenticated administrative access via a specially crafted URL, exposing critical confidentiality, integrity, and availability impacts. Documented impact: attacker could gain administrative acc...
CVE-2021-29908
The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM X-Force ID: 207747...
CVE-2021-34702
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator privilege levels for low-value sensitive data. An attacker...
Security Bulletin: IBM Virtualization Engine TS7700 Management Interface (CVE-2021-29908)
Summary The IBM TS7700 Management Interface is vulnerable to unauthenticated access. By accessing a specially-crafted URL, an attacker may gain administrative access to the Management Interface without authentication. IBM Virtualization Engine TS7700 has addressed the vulnerability. Vulnerability...
Cisco Vision Dynamic Signage Director 跨站脚本漏洞
Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco. Cisco Vision Dynamic Signage Director suffers from a cross-site scripting vulnerability that stems from This vulnerability is due to insufficient validation of user-supplied input by the web-based...
PT-2021-4699 · Cisco · Cisco Intersight Virtual Appliance
Name of the Vulnerable Software and Affected Versions: Cisco Intersight Virtual Appliance affected versions not specified Description: The issue is related to insufficient input validation in the web-based management interface of Cisco Intersight Virtual Appliance, which could allow an...
IBM Ts7700 授权问题漏洞
The Ibm Ts7700 is a mainframe virtual tape solution from Ibm, Inc. for optimizing data security and business continuity. An authorization issue vulnerability exists in the IBM TS7700 Management Interface, which can be exploited by an attacker to gain administrative access to the Management...
Wowza Media Systems Wowza Streaming Engine 资源管理错误漏洞
Wowza Media Systems Wowza Streaming Engine is a powerful, customizable and scalable media server software from Wowza Media Systems, USA. It is used to reliably stream high-quality video and audio to any device, anywhere. A security vulnerability exists in Wowza Media Systems Wowza Streaming Engin...
Cybozu Remote Service 跨站脚本漏洞
Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...
Cybozu Remote Service 跨站脚本漏洞
Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...
Cybozu Remote Service 权限许可和访问控制问题漏洞
Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a bypass vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to change the data in the management interface...
Cybozu Remote Service 跨站请求伪造漏洞
A cross-site request forgery vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to hijack the administrator's authentication and perform unintended actions...
CVE-2021-31605
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...