Directory Traversal Vulnerability in iOffice.net Information Management Platform of Guangzhou Redfan Technology Co.

iOffice.net is the information management platform developed by Redfan Technology based on the latest technology of Microsoft . Ltd. iOffice.net information management platform exists directory traversal vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.(CNVD-2021-22467)

Shandong Weimicro Technology Co., Ltd. is a science and technology-oriented enterprise mainly engaged in technology research and development. Shandong Weimicro Technology Co., Ltd. water information management platform has a SQL injection vulnerability, which can be exploited by attackers to obta...

Aruba Networks AirWave Management Platform Improper Access Control Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An improper access control vulnerability exists in the web management...

Aruba Networks AirWave Management Platform SQL Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An SQL injection vulnerability exists in the API of Aruba Networks...

Aruba Networks AirWave Management Platform Cross-Site Scripting Vulnerability (CNVD-2021-15039)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A stored cross-site scripting vulnerability exists in the web...

Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML External Entity Injection XXE vulnerability exists in the web...

Aruba Networks AirWave Management Platform SQL Injection Vulnerability (CNVD-2021-15036)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An SQL injection vulnerability exists in the API of Aruba Networks...

Aruba Networks AirWave Management Platform Cross-Site Request Forgery Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A cross-site request forgery vulnerability exists in the web manageme...

Aruba Networks AirWave Management Platform Command Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the web management...

Aruba Networks AirWave Management Platform Command Injection Vulnerability (CNVD-2021-15035)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

Aruba Networks AirWave Management Platform Command Injection Vulnerability (CNVD-2021-15033)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

Aruba Networks AirWave Management Platform Command Injection Vulnerability (CNVD-2021-15042)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the web management...

CVE-2021-26969

A remote authenticated authenticated xml external entity xxe vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit...

CVE-2021-26968

A remote authenticated stored cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site...

CVE-2021-26971

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...

CVE-2021-26971

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...

CVE-2021-26965

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacke...

CVE-2021-26969

A remote authenticated authenticated xml external entity xxe vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit...

CVE-2021-26970

CVE-2021-26970 describes a remote authenticated command execution vulnerability in Aruba AirWave Management Platform’s web interface, affecting versions prior to 8.2.12.0. An authenticated attacker could run arbitrary commands on the underlying host as a lower-privileged user, potentially leading...

CVE-2021-26968

The CVE pertains to Aruba AirWave Management Platform (AirWave). A stored Cross-Site Scripting (XSS) vulnerability exists in the web-based management interface for AirWave versions before 8.2.12.0. The issue is exploitable by an authenticated, remote attacker who can trigger stored script code in...