12887 matches found
Cisco Firepower Management Center 代码问题漏洞
Cisco Firepower Management Center FMC is a next-generation firewall management center software from Cisco, which is vulnerable to a code issue that could be exploited by an authenticated remote attacker to bypass security protections and upload malicious A remote, authenticated attacker could...
The vulnerability of the fileexists function in the PHP programming language allows attackers to circumvent existing security restrictions.
The vulnerability of the fileexists function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
GHSA-7R87-CJ48-WJ45 Potential Captcha Validate Bypass in flask-session-captcha
Impact flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. The captcha.validate function would return None if passed no value e.g. by submitting a request with an empty form. If implementing users were checking th...
PT-2022-2692 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in the logic used to count failed login attempts, which could result in the account lockout threshold being bypassed. This issue is related to the implementation of the core...
The vulnerability relates to the implementation of `pcntl_exec` in the PHP programming language interpreter. It arises due to an error in processing paths to files containing the character `\x00`. This allows attackers to circumvent existing security restrictions and execute arbitrary code.
The vulnerability of implementing pcntlexec in the PHP programming language is related to an error in processing paths to files containing the character \x00. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary code...
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-33197)
Summary Security Vulnerabilities affect IBM Cloud Private - Golang Vulnerability Details CVEID: CVE-2021-33197 DESCRIPTION: Golang Go could allow a remote attacker to bypass security restrictions, caused by a flaw in the ReverseProxy in net/http/httputil. By sending a specially-crafted request, a...
Slackware: Security Advisory (SSA:2017-223-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an "Accept: application/json" header...
USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor
Summary USR-G806 is a industrial 4G wireless LTE router which provides a solution for users to connect own device to 4G network via WiFi interface or Ethernet interface. USR-G806 adopts high performance embedded CPU which can support 580MHz working frequency and can be widely used in Smart Grid,...
CVE-2021-43129
Desire2Learn/D2L Brightspace LMS quizzing feature contains an access-control bypass for the Disable Right Click setting. Affected component: quizzing (Disable Right Click) in the LMS; root cause is an access-control flaw that allows a remote user to bypass the protection and gain copy/print capab...
CVE-2022-24857 Multi factor authentication bypass in django-mfa3
django-mfa3 is a library that implements multi factor authentication for the django web framework. It achieves this by modifying the regular login view. Django however has a second login view for its admin area. This second login view was not modified, so the multi factor authentication can be...
Delta Controls enteliTOUCH 3.40.3935 Cookie User Password Disclosure
Summary enteliTOUCH - Touchscreen Building Controller. Get instant access to the heart of your BAS. The enteliTOUCH has a 7-inch, high-resolution display that serves as an interface to your building. Use it as your primary interface for smaller facilities or as an on-the-spot access point for...
Verizon 4G LTE Network Extender Weak Credentials Algorithm
Summary An LTE Network Extender enhances your indoor and 4G LTE data and voice coverage to provide better service for your 4G LTE mobile devices. It's an extension of our 4G LTE network that's placed directly in your home or office. The LTE Network Extender works with all Verizon-sold 4G LTE mobi...
Vmware Spring Framework 安全特征问题漏洞
Vmware Spring Framework is the United States, Vmware Vmware company's set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. Vmware Spring Framework has a security feature issue vulnerability that stems from the pattern of...
Dell PowerScale OneFS Security Bypass Vulnerability (CNVD-2022-32806)
Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by an unauthenticated, remote attacker to cause an account compromise...
Dell PowerScale OneFS Security Bypass Vulnerability (CNVD-2022-32804)
Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to not log information that identifies the source of changes to account information...
Microsoft Windows PowerShell 权限许可和访问控制问题漏洞
Microsoft Windows PowerShell is a command line shell program and scripting environment from Microsoft Corporation that enables command line users and script writers to leverage the power of . Microsoft Windows PowerShell A privilege-granting and access-control issue vulnerability exists, which...
Dell PowerScale OneFS Security Bypass Vulnerability
Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by a remote unprivileged malicious attacker to cause full access to the system...
KLA20183 Multiple vulnerabilities in Git for Windows
Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories Git security vulnerability announced Related products Git-for-Windows CVE list CVE-2022-24767 unknown CVE-2022-247...