164 matches found
CVE-2021-25155
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below...
CVE-2021-25155
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below...
Aruba Instant Access Point 输入验证错误漏洞
Aruba Access Points is a wireless network from Aruba USA. It provides Internet access. A security vulnerability exists in Aruba Instant Access Points, which can be exploited by an attacker to remotely modify arbitrary files. The following products and versions are affected: Aruba Instant 6.4.x:...
The vulnerability of the REST API interface of the Cisco Data Center Network Manager system allows a attacker to modify the device’s configuration.
The vulnerability of the REST API interface of the Cisco Data Center Network Manager system relates to the use of an incomplete blacklist. Exploiting this vulnerability could allow a malicious actor to modify the device’s configuration remotely...
GHSA-PJ4G-4488-WMXM Dynamic modification of RPyC service due to missing security check
Impact Version 4.1.0 of RPyC has a vulnerability that affects custom RPyC services making it susceptible to authenticated remote attacks. Patches Git commits between September 2018 and October 2019 and version 4.1.0 are vulnerable. Use a version of RPyC that is not affected. Workarounds The commi...
The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to modify the configuration of a vulnerable device.
The vulnerability of the Cisco Identity Services Engine’s network policy management web interface is related to access control errors based on role-based authorization RBAC. Exploiting this vulnerability could allow a malicious actor to remotely alter the configuration of the vulnerable device...
The vulnerability of the “file transfer” component of the TIBCO Managed File Transfer Platform Server allows a perpetrator to modify any files they choose.
The vulnerability of the “file transfer” component of the TIBCO Managed File Transfer Platform Server is related to errors in the mechanism for processing authentication requests. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...
PT-2020-6067 · Unknown · Property-Expr
Name of the Vulnerable Software and Affected Versions: property-expr versions prior to 2.0.3 Description: The issue is related to Prototype Pollution via the setter function. It may allow a remote attacker to perform a prototype pollution attack by exploiting uncontrolled modification of object...
The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers arises from improperly implemented data filtering during input processing. This allows attackers to alter the contents of project configuration files.
The vulnerability of the Schneider Electric Easergy Builder software for configuring controllers is related to improperly implemented data filtering. Exploiting this vulnerability allows a malicious actor to remotely modify the contents of project configuration files...
Apple iOS and Apple iPadOS File System Component Logic Vulnerability
Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.File System is one of the file system components. A security vulnerability exists in the File System component ...
Juplink Intelligent Technologies RX4-1500 Unauthorized Operation Vulnerability
The Juplink Intelligent Technologies RX4-1500 is a wireless router from Juplink Intelligent Technologies. A security vulnerability exists in httpd in the Juplink Intelligent Technologies RX4-1500 versions v1.0.3 through v1.0.5. A remote attacker could use this vulnerability to modify or access...
The vulnerability of the Application Service Level Mgmt component of the Enterprise Manager Base Platform allows attackers to access data for modification, addition, or deletion, gain unauthorized access to protected information, or cause service failures.
The vulnerability of the Application Service Level Mgmt component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
CVE-2019-11587
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery CSRF...
The vulnerability affects the implementation of the Smart Class class in the software for managing Red Hat Satellite systems, as well as the Foreman application for managing, configuring, and monitoring servers. This allows a malicious individual to modify the configuration files.
The vulnerability of the Smart Class class implementation in the software for managing Red Hat Satellite systems, as well as the Foreman management, configuration, and monitoring application, is related to improper authentication. Exploiting this vulnerability allows a malicious actor to remotely...
Code injection
In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...
CVE-2019-10966
In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms...
CVE-2019-10966
CVE-2019-10966 affects GE Aestiva and Aespire anesthesia devices (7100/7900) where serial ports extended to TCP/IP via an unsecured terminal server. Root cause is improper authentication, enabling remote modification of device configuration and silencing of alarms without user interaction. The IC...
The vulnerability of the Attachments sub-component of the Oracle iSupplier Portal component in the Oracle E-Business Suite system, which allows a malicious individual to access data for modification, addition, or deletion.
The vulnerability of the Attachments sub-component of the Oracle iSupplier Portal component in the Oracle E-Business Suite enterprise automation system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify,...
The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to modify protected data.
The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...