706 matches found
Human Resources Information Technology (eHR) Management Platform suffers from SQL Injection Vulnerability
hereinafter referred to as the same share software focuses on the manufacturing industry, commercial circulation industry, government departments, enterprises and institutions, such as a full range of management software research and development and services, with the domestic industry's well-kno...
Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability (CNVD-2021-33527)
Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...
Aruba Networks AirWave Management Platform Command Injection Vulnerability (CNVD-2021-33526)
Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. A command injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a special...
Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35881)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...
Arbitrary File Download Vulnerability in Dahua In-vehicle Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2021-35888)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...
Arbitrary File Download Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An arbitrary file download vulnerability exists in the Dahua vehicle integrated management platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability ...
Unauthorized Access Vulnerability in Service Management Platform of Ortho Software Co.
Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. An unauthorized access vulnerability exists in the service management platform of Zhengfang Software Co., Ltd. that can be...
CVE-2021-29137
A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
Remote code execution
A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-25166
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-25163
A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
Design/Logic Flaw
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-29137
A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-29137
Aruba AirWave Management Platform before version 8.2.12.1 contains a remote URL redirection vulnerability. The affected product is Aruba AirWave Management Platform; vulnerable component is the URL redirection logic. Aruba has released patches addressing this vulnerability, with the fix included ...
CVE-2021-25167
Aruba AirWave Management Platform is affected by a remote unauthorized access vulnerability in versions prior to 8.2.12.1. The issue is addressed by Aruba with patches and fixes released to reach version 8.2.12.1. The public documents do not specify the root cause details beyond this remote acces...
CVE-2021-25167
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-25166
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...
CVE-2021-25166
The CVE-2021-25166 entry covers Aruba AirWave Management Platform in versions prior to 8.2.12.1, where a remote unauthorized access vulnerability exists. Multiple connected sources confirm an issue affecting AirWave with a remedy provided: upgrade to 8.2.12.1 (or later) to address the vulnerabili...
CVE-2021-25163
Aruba AirWave Management Platform (pre-8.2.12.1) contains a remote XML External Entity (XXE) vulnerability (CVE-2021-25163). Exploitation could lead to sensitive data exposure or DoS. Aruba released patches to address this, fixed in 8.2.12.1; apply the update to mitigate. No explicit exploitation...
CVE-2021-25163
A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...