209 matches found
EUVD-2023-43099
Malicious code in bioql PyPI...
CVE-2024-6921
Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024...
CVE-2024-6920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...
CVE-2024-6919
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024...
CVE-2024-23843
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTSRevision 125558, from 5.0...
CVE-2013-1124
The Cisco Network Admission Control NAC agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine ISE server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309...
CVE-2021-26622
An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability...
CVE-2020-12820
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remote attacker authenticated to the SSL VPN to crash the FortiClient NAC daemon fcnacd and potentially execute arbitrary code via requesting a large FortiClien...
CVE-2024-23843
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTSRevision 125558, from 5.0...
CVE-2024-23843
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTSRevision 125558, from 5.0...
CVE-2024-23843
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0.0 through V5.0.60; Genian NAC LTS V5.0: from 5.0.0 LTS through 5.0.55 LTSRevision 125558, from 5.0...
CVE-2024-23843
CVE-2024-23843 describes an SQL Injection in Genians Genian NAC V5.0 and Genian NAC LTS V5.0, caused by improper neutralization of special elements in SQL commands. Affected: Genian NAC V5.0 5.0.0–5.0.60; Genian NAC LTS V5.0 5.0.0 LTS–5.0.56 LTS (Revision 125560). Impact is an SQL injection vulne...
Genians Genian NAC 安全漏洞
Genians Genian NAC is a network security and access control software from Genians Korea. It helps organizations identify IP-enabled devices, manage vulnerabilities and check device configurations to protect network access environments. A security vulnerability exists in Genians Genian NAC, which...
PT-2024-20118 · Genians · Genian Nac
Name of the Vulnerable Software and Affected Versions: Genians Genian NAC V5.0 versions 5.0.0 through 5.0.60 Genians Genian NAC LTS V5.0 versions 5.0.0 LTS through 5.0.56 LTS Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements use...
CVE-2024-6920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.This issue affects NACPremium: through 01082024...
CVE-2024-6920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...
CVE-2024-6919
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPremium: through 01082024...
CVE-2024-6920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS. This issue affects NACPremium: through 01082024...
CVE-2024-6921
Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data. This issue affects NACPremium: through 01082024...
CVE-2024-6921
Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024...