Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software IPv6 VPN. An attacker...

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, Inc USA. An Access Control Error vulnerability exists in Google Chrome prior to version 106, which stems from insufficient validation of untrusted input in a VPN...

Security Bulletin: Unauthorized access exposure on IBM SAN Volume Controller and Storwize Family (CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965)

Abstract Administrative access to the system via the IP interface may be obtained without authentication. Content VULNERABILITY DETAILS: CVEID: CVE-2013-2251 CVE-2013-2248 CVE-2013-2135 CVE-2013-2134 CVE-2013-2115 CVE-2013-1966 CVE-2013-1965 DESCRIPTION: The vulnerabilities can be exploited by a...

PT-2022-7406 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue is related to the usage of RSS feeds or external calendar in planning, which is subject to Server-Side Request Forgery SSRF exploit. This allows an attacker to scan server ports or services...

Torguard VPN 安全漏洞

Torguard VPN is an anonymous VPN, proxy and email service from Torguard. Torguard VPN version 4.8 suffers from a security vulnerability that allows an attacker to dump sensitive information without administrator privileges...

The vulnerability of the messaging service in the centralized network management system of Cisco Catalyst SD-WAN Manager allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the Cisco Catalyst SD-WAN Manager, a centralized messaging service, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected information or cause service failures by sending specially...

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server allows a hacker to gain access to the IPSec VPN network.

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker to gain access to the IPSec VPN network...

CVE-2022-20923

A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vulnerability is due to the improper...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Networking solutions from Cisco. A security vulnerability exists in Cisco SD-WAN vManage Software versions prior to 20.6.4, prior to 20.9.1, which stems from a vulnerability in the binding configuration...

Cross site request forgery (csrf)

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan private network for...

CVE-2022-2267 MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF

The Mailchimp for WooCommerce WordPress plugin before 2.7.1 has an AJAX action that allows any logged in users such as subscriber to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the response so it can be used to scan priva...

CVE-2022-38368

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

CVE-2022-20336

In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution privileges needed. User interaction is not...

Cisco Adaptive Security Appliances Software 跨站脚本漏洞

Cisco ASA is a family of firewalls for enterprise security applications from Cisco. A cross-site scripting vulnerability exists in the Cisco Adaptive Security Appliance ASA Software that stems from incorrect validation of input passed to a clientless SSL VPN component...

PT-2022-4099 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to improper validation of input that is passed to the...

Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...

Trend Micro VPN Proxy Pro 安全漏洞

Trend Micro VPN Proxy Pro is one of the best virtual private network services from Trend Micro. A security vulnerability exists in Trend Micro VPN Proxy Pro version 5.2.1026 and prior versions. A local attacker could exploit the vulnerability to gain elevation of privilege on affected systems...

Zyxel USG FLEX 路径遍历漏洞

Zyxel USG FLEX is a firewall from China-based Hopkins Technology Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel products that stems from a directory traversal...

多款Siemens产品缓冲区错误漏洞

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...