CVE-2021-27663

A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5...

The vulnerability of the Vijeo Designer Basic and Vijeo Designer software, related to the use of pre-installed credentials, allows a perpetrator to gain unauthorized access to protected information.

It is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Cisco SD-WAN router microprogramming software, related to reading beyond the buffer in memory, allows a intruder to gain unauthorized access to the device.

The vulnerability of Cisco SD-WAN router microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the device through a specially crafted MPLS packet...

Cisco ASR 5000授权问题漏洞

The Cisco ASR 5000 is a 5000 Series gateway product from Cisco. An authorization issue vulnerability exists in all versions of the Cisco ASR 5000 Series that allows remote users to gain unauthorized access to the system...

CVE-2020-4669

IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID:...

The vulnerability of the Process Operations sub-component of the Oracle MES for Process Manufacturing component of the Oracle E-Business Suite allows a intruder to gain unauthorized access to the device.

The vulnerability of the Process Operations sub-component of the Oracle MES for Process Manufacturing component of the Oracle E-Business Suite is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device...

CVE-2021-25166

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...

Aruba Networks AirWave Management Platform 操作系统命令注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

CVE-2021-3511

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to security flaws in data protection, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

SAP Solution Manager remote unauthorized OS commands execution

This module exploits the CVE-2020-6207 vulnerability within the SAP EEM servlet tcsmdagentapplicationeem of SAP Solution Manager SolMan running version 7.2. The vulnerability occurs due to missing authentication checks when submitting a SOAP request to the /EemAdminService/EemAdmin page to get...

The vulnerability of the settings.cfg.viw configuration file of the device management application for Mikrotik RouterOS WinBox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the settings.cfg.viw configuration file of the device management application for Mikrotik RouterOS WinBox is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to...

CVE-2021-3191

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ L and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

Design/Logic Flaw

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ L and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

CVE-2021-3191

Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ L and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and...

CVE-2021-3191

The CVE-2021-3191 entry concerns Idelji Web ViewPoint Suite used with HPE NonStop. Affected component: Idelji Web ViewPoint Suite remote interfaces that enable Remote Unauthorized Access for specific targets (e.g., T0320L01^ABY/ACD, T0952L01^AAR through T0952L01^AAX, T0986L01^AAD through T0986L01...

HPE Web ViewPoint Suite Authorization Issues Vulnerability

An authorization issue vulnerability exists in HPE Web ViewPoint Suite that stems from the product allowing remote unauthorized access...

The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

HPESBNS04081 rev.1 - HPE Web ViewPoint Suite, Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint T0320 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint Enterprise T0986 - L, J and H series CVSS Scores: | CVE | CVSS Vector | Base...

CVE-2021-22292

There is a denial of service DoS vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS...