WSO2多款产品 安全漏洞

WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...

EUVD-2020-3459

Malware in sbrugna...

EUVD-2012-4515

Malware in sbrugna...

EUVD-2012-4512

Malware in sbrugna...

EUVD-2012-4517

Malware in sbrugna...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2012-4588

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service excessive list...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

Design/Logic Flaw

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

Sierra Wireless AirLink Mobility Manager 安全漏洞

Sierra Wireless AirLink Mobility Manager is a leading end-to-end network management solution from Sierra Wireless Canada that provides simplified, remote and real-time mass configuration, control and troubleshooting of all in-vehicle AirLink routers and gateways, connected mobility assets and...

PT-2022-8321 · Sierra Wireless · Sierra Wireless Airlink Mobility Manager

Name of the Vulnerable Software and Affected Versions: Sierra Wireless AirLink Mobility Manager AMM versions prior to 2.17 Description: The issue allows an unauthenticated attacker to obtain a login session with administrator privileges due to mishandled sessions. Recommendations: For versions...

CVE-2020-11101

CVE-2020-11101 affects Sierra Wireless AirLink Mobility Manager (AMM) prior to 2.17. The issue arises from mishandling sessions, allowing an unauthenticated attacker to obtain a login session with administrator privileges. Public records across multiple sources confirm AMM versions before 2.17 ar...

CVE-2020-11101

Sierra Wireless AirLink Mobility Manager AMM before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges...

CVE-2012-4591

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...

Code injection

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...

Design/Logic Flaw

Login.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

Code injection

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service excessive list...

CVE-2012-4589

Login.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2012-4589

CVE-2012-4589 affects McAfee Enterprise Mobility Manager (EMM) Portal login.aspx prior to version 10.0. The issue is that the login form fields lack the off autocomplete attribute, which can let an unattended workstation be abused to gain access. This is described in the NVD entry for CVE-2012-45...