VulnCheck KEV: CVE-2025-0890

UNSUPPORTED WHEN ASSIGNED Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00AAFR.4C020170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but...

Atos Unify OpenScape SBC Security Vulnerability

Atos Unify OpenScape SBC is a datacenter-ready virtualization security application from Atos France. It is used to securely extend your applications beyond the network perimeter. A security vulnerability exists in Atos Unify OpenScape SBC prior to V10 R3.4.0, OpenScape Branch prior to V10 R3.4.0,...

CVE-2023-43134: Missing Authorization

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43135: Missing Authorization

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...

CVE-2016-1199

The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200...

The cloud from the enterprise built Station system through the kill oday-vulnerability warning-the black bar safety net

Saying boring to code the site the next set of program analysis Can be to the cloud from the enterprise built Station system, download the number very much so look up First saw it in the background of the login. the asp file. A look at the side of there ass and... if request. Form"submit""" then ...

Thousand Bo enterprise website management system(NWEB System)background holding shell-vulnerability warning-the black bar safety net

Management log in:/system/adminlogin. asp 'Management account: admin 'Key code: admin888 ' 'Site data:/Database/NwebCnSite. mdb conventional content database '/Database/BakNwebCnSite. mdb backup the content database '/Database/NwebCnStat. mdb conventional flow database '/Database/BakNwebCnStat. m...

Cross site scripting

Cross-site scripting XSS vulnerability in the management login GUI page in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different...

CVE-2011-1524: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management login GUI page in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different...

CVE-2008-0578: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...